diff --git a/roles/copr/backend/files/proper-action-processor-umask.patch b/roles/copr/backend/files/proper-action-processor-umask.patch
new file mode 100644
index 0000000000..31870f0b4d
--- /dev/null
+++ b/roles/copr/backend/files/proper-action-processor-umask.patch
@@ -0,0 +1,11 @@
+--- /usr/bin/copr-backend-process-action	2019-12-04 01:01:26.000000000 +0000
++++ /usr/bin/copr-backend-process-action	2019-12-05 05:43:14.586341122 +0000
+@@ -104,7 +104,7 @@
+ 
+     context = contextlib.nullcontext()
+     if args.daemon:
+-        context = daemon.DaemonContext()
++        context = daemon.DaemonContext(umask=0o22)
+ 
+     with context:
+         logger_name = '{}.{}.pid-{}'.format(
diff --git a/roles/copr/backend/tasks/main.yml b/roles/copr/backend/tasks/main.yml
index f762e5ec32..b8ba248ecd 100644
--- a/roles/copr/backend/tasks/main.yml
+++ b/roles/copr/backend/tasks/main.yml
@@ -28,6 +28,11 @@
       - php-cli
       - cronolog
 
+- name: setup correct umask for daemoncontext in action processor
+  patch: src=patches/proper-action-processor-umask.patch
+         dest=/usr/bin/copr-backend-process-action
+  tags: patches
+
 - name: install openstackclient for image preparation
   dnf: state=present name=python3-openstackclient
   when: devel|bool