diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9e1a9b91..47d0b6c9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -64,6 +64,7 @@ The **patch** part changes incrementally at each release.
 * tomcat: fix typo for default tomcat_version
 * evolinux-base: Fix our zsyslog rotate config that doesn't work on Debian 10
 * certbot: Properly evaluate when apache is installed
+* evolinux-base: Don't make alert5.service executable as systemd will complain
 
 ### Security
 
diff --git a/evolinux-base/tasks/system.yml b/evolinux-base/tasks/system.yml
index bd799363..dbf9cbd9 100644
--- a/evolinux-base/tasks/system.yml
+++ b/evolinux-base/tasks/system.yml
@@ -160,7 +160,7 @@
     src: alert5.service
     dest: /etc/systemd/system/alert5.service
     force: yes
-    mode: "0755"
+    mode: "0644"
   when:
     - evolinux_system_alert5_init
     - ansible_distribution_major_version | version_compare('10', '>=')