diff --git a/manifests/main/dirs.pp b/manifests/main/dirs.pp
index e3ae64a..33c2cc8 100644
--- a/manifests/main/dirs.pp
+++ b/manifests/main/dirs.pp
@@ -12,7 +12,7 @@ class confdroid_ssh::main::dirs (
     path     => $ssh_etc_path,
     owner    => $sshd_user,
     group    => $sshd_user,
-    mode     => '0755',
+    mode     => '0700',
     selrange => s0,
     selrole  => object_r,
     seltype  => etc_t,
@@ -23,7 +23,7 @@ class confdroid_ssh::main::dirs (
     ensure   => directory,
     owner    => $sshd_user,
     group    => $sshd_user,
-    mode     => '0755',
+    mode     => '0700',
     selrange => s0,
     selrole  => object_r,
     seltype  => etc_t,
diff --git a/manifests/main/files.pp b/manifests/main/files.pp
index f464f53..5ba3bba 100644
--- a/manifests/main/files.pp
+++ b/manifests/main/files.pp
@@ -26,7 +26,7 @@ class confdroid_ssh::main::files (
       path     => $sshd_custom_conf,
       owner    => $sshd_user,
       group    => $sshd_user,
-      mode     => '0755',
+      mode     => '0640',
       selrange => s0,
       selrole  => object_r,
       seltype  => etc_t,