diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5a0227fe..c92df47f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -31,6 +31,7 @@ The **patch** part changes incrementally at each release.
 ### Fixed
 * nginx: fix basic auth for default vhost
 * dovecot: fix support of plus sign
+* mysql/mysql-oracle: mysqltuner cron task is executable
 
 ## [9.1.6] - 2018-02-02
 
diff --git a/mysql-oracle/tasks/utils.yml b/mysql-oracle/tasks/utils.yml
index b0b3284b..c5979ede 100644
--- a/mysql-oracle/tasks/utils.yml
+++ b/mysql-oracle/tasks/utils.yml
@@ -168,6 +168,7 @@
   copy:
     src: mysqltuner.cron.sh
     dest: /etc/cron.{{ mysql_cron_mysqltuner_frequency | mandatory }}/mysqltuner.sh
+    mode: "0700"
   when: mysql_cron_mysqltuner | bool
   tags:
     - mysql
diff --git a/mysql/tasks/utils.yml b/mysql/tasks/utils.yml
index 499afaa8..114f614b 100644
--- a/mysql/tasks/utils.yml
+++ b/mysql/tasks/utils.yml
@@ -126,6 +126,7 @@
   copy:
     src: mysqltuner.cron.sh
     dest: /etc/cron.{{ mysql_cron_mysqltuner_frequency | mandatory }}/mysqltuner.sh
+    mode: "0700"
   when: mysql_cron_mysqltuner
   tags:
     - mysql