I don't follow either of your statements. Rename (assuming you are properly not crossing filesystem boundaries) preserves the original inode, only the directory entry changes. That's how it is able to be atomic. So the permissions on the temporary file persist. You should chmod the temp file before the rename so there isn't a window when the permissions are potentially too restrictive (the default is 600).