diff --git a/mariadb.yml b/mariadb.yml
index b4757cb..ed072b6 100644
--- a/mariadb.yml
+++ b/mariadb.yml
@@ -83,7 +83,7 @@
             fi
           done
 
-          chmod 400 ssl/*.pem
+          chmod 440 ssl/*.pem
           chown 999:33 ssl/*.pem
 
           if [ -n "$new" ]