diff --git a/roles/bootstrap-os/tasks/bootstrap-centos.yml b/roles/bootstrap-os/tasks/bootstrap-centos.yml
index c8a395af615a92620f80b97c399259f107ad89a6..79d66eebf50d34dfc4193081d9b124a55cb2cec9 100644
--- a/roles/bootstrap-os/tasks/bootstrap-centos.yml
+++ b/roles/bootstrap-os/tasks/bootstrap-centos.yml
@@ -74,6 +74,7 @@
     section: "extras"
     option: "{{ item.option }}"
     value: "{{ item.value }}"
+    mode: 0644
   with_items:
     - { option: "name", value: "CentOS-{{ ansible_distribution_major_version }} - Extras" }
     - { option: "enabled", value: "1" }
diff --git a/roles/container-engine/cri-o/tasks/main.yaml b/roles/container-engine/cri-o/tasks/main.yaml
index 55db2690f749eef279383a2253fc22f6d8820712..25b338ed58ba326da1580ec483c47e5470045b35 100644
--- a/roles/container-engine/cri-o/tasks/main.yaml
+++ b/roles/container-engine/cri-o/tasks/main.yaml
@@ -84,6 +84,7 @@
   template:
     src: config.json.j2
     dest: /etc/crio/config.json
+    mode: 0644
   register: reg_auth_install
 
 - name: Add skopeo pkg to install