diff --git a/target/start-mailserver.sh b/target/start-mailserver.sh
index 9b2bcfd6..02c12ac4 100644
--- a/target/start-mailserver.sh
+++ b/target/start-mailserver.sh
@@ -1444,7 +1444,7 @@ function _setup_security_stack() {
 	fi
 
 	echo "1;  # ensure a defined return" >> $dms_amavis_file
-
+	chmod 444 $dms_amavis_file
 
 	# Fail2ban
 	if [ "$ENABLE_FAIL2BAN" = 1 ]; then