--- a/log.pl	Tue Aug 28 09:21:09 2012 +0200
+++ b/log.pl	Fri Aug 30 17:15:59 2013 +0200
@@ -124,14 +124,22 @@
     }
 
     if ($opt_initdir) {
+
         my $repo = Logbuch::HG->new(repo => $opt_initdir);
 
         $repo->is_repository()
           and die "$ME: directory already initialized, skipping\n";
 
+        # any repository is likely to contain sensitive data somewhere
+        my $umask = umask 0077
+            or die "$ME: Can't set umask: $!";
+
         $repo->init()
           or die "E: initialization failed\n";
 
+        umask $umask
+            or warn "$ME: Can't restore umask: $!";
+
         $repo->addremove();
         $repo->commit("initial check in");