diff --git a/procmail/manifests/init.pp b/procmail/manifests/init.pp
index 41680c0..11f203d 100644
--- a/procmail/manifests/init.pp
+++ b/procmail/manifests/init.pp
@@ -29,7 +29,7 @@ class procmail {
     }
 
     exec { "generate-procmailrc":
-        command     => '( echo "DROPPRIVS=yes" ; find /etc/procmailrc.d/*.rc -exec echo "INCLUDERC={}" \; ) > /etc/procmailrc ; true',
+        command     => '/bin/sh -c -- \'umask 022; ( echo "DROPPRIVS=yes" ; find /etc/procmailrc.d/*.rc -exec echo "INCLUDERC={}" \; ) > /etc/procmailrc ; true\'',
         path        => "/bin:/usr/bin:/sbin:/usr/sbin",
         refreshonly => true,
     }