diff --git a/usr.bin/mail/send.c b/usr.bin/mail/send.c
index 5be740565d73..0d41cee200a0 100644
--- a/usr.bin/mail/send.c
+++ b/usr.bin/mail/send.c
@@ -566,8 +566,13 @@ savemail(char name[], FILE *fi)
 	char buf[BUFSIZ];
 	int i;
 	time_t now;
+	mode_t saved_umask;
 
-	if ((fo = Fopen(name, "a")) == NULL) {
+	saved_umask = umask(077);
+	fo = Fopen(name, "a");
+	umask(saved_umask);
+
+	if (fo == NULL) {
 		warn("%s", name);
 		return (-1);
 	}