diff --git a/mariadb.yml b/mariadb.yml
index a2895eb..21d030e 100644
--- a/mariadb.yml
+++ b/mariadb.yml
@@ -90,7 +90,7 @@
           done
 
           # make it readable for mysql user in the container
-          chmod 40 ssl/*.pem
+          chmod 400 ssl/*.pem
           chown 999:0 ssl/*.pem
 
           # restart if new cert ist available