diff --git a/boot/loader/entries/arch-lts-fallback.conf b/boot/loader/entries/arch-lts-fallback.conf
old mode 100755
new mode 100644
diff --git a/boot/loader/entries/arch-lts.conf b/boot/loader/entries/arch-lts.conf
old mode 100755
new mode 100644
diff --git a/boot/loader/loader.conf b/boot/loader/loader.conf
old mode 100755
new mode 100644
diff --git a/etc/fstab.metal b/etc/fstab.metal
index 10f4837..0dd0b0e 100644
--- a/etc/fstab.metal
+++ b/etc/fstab.metal
@@ -1,5 +1,5 @@
 /dev/md/root / xfs defaults 0 0
-/dev/md/boot /boot vfat rw,nosuid,nodev,noexec,fmask=0077,dmask=0077 0 2
+/dev/md/boot /boot vfat rw,nosuid,nodev,noexec,fmask=0177,dmask=0077 0 2
 
 /dev/mapper/swap none swap defaults 0 0
 tmpfs /etc/nginx/session-ticket-keys tmpfs size=1M,mode=700,noswap,x-systemd.before=nginx-create-session-ticket-keys.service,x-systemd.required-by=nginx-create-session-ticket-keys.service 0 0