diff --git a/lib/log.js b/lib/log.js
index <HASH>..<HASH> 100644
--- a/lib/log.js
+++ b/lib/log.js
@@ -58,7 +58,7 @@ function Log(prefix, path, echo, timestamp) {
     var filestream;
 
     if (path) {
-        filestream = fs.createWriteStream(path, { flags: 'a'});
+        filestream = fs.createWriteStream(path, { flags: 'a', mode: 0600 });
     }
 
     timestamp = timestamp || require('./timestamp');
Tightens permissions on log file so readable only to control user locally