Default umask for cron jobs

On RHEL, PAM is used, so you could try using pam_umask

Try putting this in /etc/pam.d/crond

session optional pam_umask.so umask=0022

Naturally, this is untested, and may very well break assumptions made by various applications.