Page caching and world writable directories

I turned on page caching for the index and show actions in a controller
named “posts” in a blogging application.

The caching path is set to tmp/cache

As the pages get cached, the “/posts” directory created to hold the
cached pages is world writable. Why is it being created with this
permissions? Can I change this? Is this the normal behavior for caching?