diff --git a/create_tarball b/create_tarball
index 4035d33..62abb6d 100755
--- a/create_tarball
+++ b/create_tarball
@@ -154,6 +154,7 @@ if [ ! -e $TARBALL_DIR/$package.tar$TAR_SUFFIX ]; then
   trap "rm $TARBALL_DIR/tar-$$; rm .tdescminfo; exit 1" INT
   find ./ -print0 | LC_ALL=C sort -z | \
   tar c --no-recursion --null -T - \
+    --mode=u+rw,go=rX,a-s \
     --mtime "@$(git log -1 --pretty=format:"%ct")" \
     --owner=root --group=users --exclude .git --exclude .gitmodules \
     --pax-option=exthdr.name=%d/PaxHeaders/%f,delete=atime,delete=ctime \