diff --git a/minifirewall/tasks/install.yml b/minifirewall/tasks/install.yml
index 97af8db8..8e211fb9 100644
--- a/minifirewall/tasks/install.yml
+++ b/minifirewall/tasks/install.yml
@@ -29,3 +29,9 @@
 - name: configuration is copied
   command: "cp {{ minifirewall_checkout_path }}/minifirewall.conf /etc/default/minifirewall"
   when: not default_minifirewall.stat.exists
+
+- name: fix configuration rights
+  file:
+    path: /etc/default/minifirewall
+    mode: "0600"
+    state: file