umask

Normally, if you create a 0 byte file by specifying “touch ${filename}” etc, the permission should be created as 644(rw-r–r-). If files or directories to be created are 666(rw-rw-rw-) or 777(rwxrwxrwx), all users can write and delete them.

In this way, “umask” controls the permissions of newly created files and directories.

[vagrant@localhost ~]$ umask
0002

時と場合によるが、やはりデフォルトは644で良いように思いますな。