diff --git a/scripts/install b/scripts/install
index 55e3e8c..632de21 100755
--- a/scripts/install
+++ b/scripts/install
@@ -260,7 +260,7 @@ ynh_add_config --template="some_config_file" --destination="$final_path/some_con
 # FIXME: this should be handled by the core in the future
 # You may need to use chmod 600 instead of 400,
 # for example if the app is expected to be able to modify its own config
-chmod 400
+chmod 400 "$final_path/some_config_file"
 chown $app:$app "$final_path/some_config_file"
 
 ### For more complex cases where you want to replace stuff using regexes,
diff --git a/scripts/upgrade b/scripts/upgrade
index b2cf9ef..fd11950 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -183,7 +183,7 @@ ynh_add_config --template="some_config_file" --destination="$final_path/some_con
 # FIXME: this should be handled by the core in the future
 # You may need to use chmod 600 instead of 400,
 # for example if the app is expected to be able to modify its own config
-chmod 400
+chmod 400 "$final_path/some_config_file"
 chown $app:$app "$final_path/some_config_file"
 
 ### For more complex cases where you want to replace stuff using regexes,