diff --git a/trousers/files/tcsd.init b/trousers/files/tcsd.init
index d25f352..2160784 100644
--- a/trousers/files/tcsd.init
+++ b/trousers/files/tcsd.init
@@ -10,6 +10,7 @@ SYSTEM_DATA_PATH=/usr/share/tpm
 
 start_service() {
 	mkdir -pm 775 $SYSTEM_DATA_PATH
+	chmod 600 $CONFIG_FILE
 	chown -R tss:tss $SYSTEM_DATA_PATH $CONFIG_FILE
 
 	procd_open_instance