diff --git a/configuration.nix b/configuration.nix
index b7f55ba..d96c088 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -87,7 +87,7 @@
       mkdir -p ${config.boot.lanzaboote.pkiBundle}
       ${pkgs.gnutar}/bin/tar xf ${./secrets/secureboot.tar} -C ${config.boot.lanzaboote.pkiBundle}
       chown -R root:wheel ${config.boot.lanzaboote.pkiBundle}
-      chmod -R 700 ${config.boot.lanzaboote.pkiBundle}
+      chmod -R 500 ${config.boot.lanzaboote.pkiBundle}
     '';
   };