diff --git a/contrib/scripts/safe_asterisk b/contrib/scripts/safe_asterisk
index 6dfb953730..6f3b5ebef1 100644
--- a/contrib/scripts/safe_asterisk
+++ b/contrib/scripts/safe_asterisk
@@ -24,6 +24,10 @@ PRIORITY=0
 # set system filemax on supported OSes if this variable is set
 # SYSMAXFILES=262144
 
+# Asterisk allows full permissions by default, so set a umask, if you want
+# restricted permissions.
+#UMASK=022
+
 # set max files open with ulimit. On linux systems, this will be automatically
 # set to the system's maximum files open devided by two, if not set here.
 # MAXFILES=32768
@@ -89,6 +93,10 @@ else
 
 fi
 
+if test "x$UMASK" != "x"; then
+	umask $UMASK
+fi
+
 #
 # Let Asterisk dump core
 #