diff --git a/firstboot.sh b/firstboot.sh
new file mode 100644
index 0000000..915a67e
--- /dev/null
+++ b/firstboot.sh
@@ -0,0 +1,3 @@
+#!/bin/zsh
+
+sudo launchctl config user umask 077