diff --git a/script/Makefile b/script/Makefile
index f5c5c647..c248effb 100644
--- a/script/Makefile
+++ b/script/Makefile
@@ -86,8 +86,8 @@ install:
 			${INSTALL} -c -o ${OWNER} -g ${GROUP}  -m 0644 runvirtual.sh  ${BINDIR}/runvirtual.sh.new ; \
 			echo "${INSTALL} -c -o ${OWNER} -g ${GROUP}  -m 0644 runvirtual.sh  ${BINDIR}/runvirtual.sh.new" ; \
 		fi
-		${INSTALL} -o ${OWNER} -g ${GROUP}  -m 0440 doors.bat ${VARDIR}/dosemu/c
-		${INSTALL} -o ${OWNER} -g ${GROUP}  -m 0744 mbsedos   ${BINDIR}
+		${INSTALL}    -o ${OWNER} -g ${GROUP}  -m 0640 doors.bat    ${VARDIR}/dosemu/c
+		${INSTALL}    -o ${OWNER} -g ${GROUP}  -m 0744 mbsedos      ${BINDIR}
 		@bash ./installinit.sh
 
 filelist:	Makefile
diff --git a/script/mbsedos b/script/mbsedos
index 803586c8..b28d0c78 100644
--- a/script/mbsedos
+++ b/script/mbsedos
@@ -1,3 +1,18 @@
 #!/bin/sh
 #
 # $Id$
+
+if [ "`whoami`" != "mbse" ]; then
+    echo "Only user 'mbse' is allowed"
+    exit 1
+fi
+
+# Save initial umask and set group read/write for dos
+UMASK=`umask`
+umask 007
+
+# Run DOS in X
+dosemu.bin -X -f $MBSE_ROOT/etc/dosemu/dosemu.conf
+
+# Restore umask
+umask $UMASK