setting umask as part of CMD (since standard /etc/init.d/httpd doesn't get executed)