diff --git a/internal/util/cephconf.go b/internal/util/cephconf.go
index 42cbaf727..3276269e1 100644
--- a/internal/util/cephconf.go
+++ b/internal/util/cephconf.go
@@ -49,7 +49,7 @@ func WriteCephConfig() error {
 		return err
 	}
 
-	err := ioutil.WriteFile(CephConfigPath, cephConfig, 0640)
+	err := ioutil.WriteFile(CephConfigPath, cephConfig, 0600)
 	if err != nil {
 		return err
 	}