diff --git a/vminitd/Sources/vminitd/VsockProxy.swift b/vminitd/Sources/vminitd/VsockProxy.swift
index a2fb92b5..5c0bcf6a 100644
--- a/vminitd/Sources/vminitd/VsockProxy.swift
+++ b/vminitd/Sources/vminitd/VsockProxy.swift
@@ -113,6 +113,8 @@ extension VsockProxy {
             perms: self.udsPerms,
             unlinkExisting: true
         )
+        let oldMask = umask(0)
+        defer { umask(oldMask) }
         let uds = try Socket(type: type)
         try uds.listen()
         listener = uds