diff -Nru ntop-3.3.9.orig/http.c ntop-3.3.9/http.c
--- ntop-3.3.9.orig/http.c	2008-11-07 00:56:35.000000000 +0000
+++ ntop-3.3.9/http.c	2009-04-25 09:23:50.000000000 +0000
@@ -1341,6 +1341,7 @@
 void initAccessLog(void) {
 
   if(myGlobals.runningPref.accessLogFile) {
+    umask(0137);
     myGlobals.accessLogFd = fopen(myGlobals.runningPref.accessLogFile, "a");
     if(myGlobals.accessLogFd == NULL) {
       traceEvent(CONST_TRACE_ERROR, "Unable to create file %s. Access log is disabled.",