diff --git a/ChangeLog b/ChangeLog
index 4a49a8c27..ebcda10f5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20021111
+ - (tim) [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is
+   not world writable.
+
 20021109
  - (bal) OpenBSD CVS Sync
    - itojun@cvs.openbsd.org 2002/10/16 14:31:48
@@ -818,4 +822,4 @@
      save auth method before monitor_reset_key_state(); bugzilla bug #284;
      ok provos@
 
-$Id: ChangeLog,v 1.2511 2002/11/09 16:11:10 mouring Exp $
+$Id: ChangeLog,v 1.2512 2002/11/13 23:50:04 tim Exp $
diff --git a/contrib/solaris/opensshd.in b/contrib/solaris/opensshd.in
index e7ca2489f..48b6c5702 100755
--- a/contrib/solaris/opensshd.in
+++ b/contrib/solaris/opensshd.in
@@ -3,6 +3,8 @@
 #
 # Stripped PRNGd out of it for the time being.
 
+umask 022
+
 CAT=/usr/bin/cat
 KILL=/usr/bin/kill