There is a particular program that creates files and directories with permissions 600 and 700, respectively. It creates them within its own working directory,
/home/me/program. I want those permissions to be 660 and 770 instead. The program is closed source, so changing it isn't an option. The umask is 002, so I know it isn't restricting the group permission. The program is simply specifying a restrictive permission on its own.
I considered setting a default ACLs, but it turns out that ACLs can only make a standard permission set more restrictive, not less.
I could probably react to file/dir creation events with inotifywait and issue chmod commands in response, but that feels kind of ugly.
I was hoping you guys would have a better way!