diff --git a/python/manifests/init.pp b/python/manifests/init.pp
index 09ba3a4..5a90d09 100644
--- a/python/manifests/init.pp
+++ b/python/manifests/init.pp
@@ -16,7 +16,7 @@ define python::setup::install($python="python") {
     exec { "python-setup-install-${name}":
         path    => "/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin:/usr/local/sbin",
         cwd     => "${name}",
-        command => "${python} setup.py install",
+        command => "/bin/sh -c 'umask 022; ${python} setup.py install'",
         creates => "${name}/build",
     }
 
diff --git a/util/manifests/init.pp b/util/manifests/init.pp
index ebb74f8..11ba8cf 100644
--- a/util/manifests/init.pp
+++ b/util/manifests/init.pp
@@ -57,9 +57,9 @@ define util::extract::tar($source, $ensure=present, $strip=0, $preserve=false) {
     }
 
     if $preserve {
-        $command = "${cat} ${source} | ${tar} xf - --strip-components=${strip} -C ${name}"
+        $command = "/bin/sh -c 'umask 022; ${cat} ${source} | ${tar} xf - --strip-components=${strip} -C ${name}'"
     } else {
-        $command = "${cat} ${source} | ${tar} xf - --strip-components=${strip} -C ${name} --no-same-owner --no-same-permissions"
+        $command = "/bin/sh -c 'umask 022; ${cat} ${source} | ${tar} xf - --strip-components=${strip} -C ${name} --no-same-owner --no-same-permissions'"
     }
 
     exec { "tar-extract-${name}":