diff --git a/templates/130_filesys-ngcp.yaml.tt2 b/templates/130_filesys-ngcp.yaml.tt2
index c891493..32c532d 100644
--- a/templates/130_filesys-ngcp.yaml.tt2
+++ b/templates/130_filesys-ngcp.yaml.tt2
@@ -146,7 +146,7 @@ file:
 
   /etc/mysql/grants.yml:
     exists: true
-    mode: "0600"
+    mode: "0400"
     owner: root
     group: root
     filetype: file