diff --git a/tasks/setup.yml b/tasks/setup.yml
index 8e97b70..84a0b9f 100644
--- a/tasks/setup.yml
+++ b/tasks/setup.yml
@@ -29,12 +29,14 @@
       copy:
         content: "{{ homeassistant_cmdline_content }}"
         dest: /boot/cmdline.txt
+        mode: 0755
       when: homeassistant_cmdline_override_enabled | bool
 
     - name: Exclude serial devices from ModemManager
       template:
         src: "etc/udev/rules.d/99-mm-disable.rules.j2"
         dest: "/etc/udev/rules.d/99-mm-disable.rules"
+        mode: 0640
       when: homeassistant_exclude_modemmanager | bool
       notify: __udev_reload