diff --git a/etc/permission-hardening.conf b/etc/permission-hardening.conf
new file mode 100644
index 0000000..ec69b5d
--- /dev/null
+++ b/etc/permission-hardening.conf
@@ -0,0 +1,10 @@
+## File permission hardening.
+##
+## Syntax:
+## [filename] [mode] [owner] [group] [capability]
+##
+/home/ 0755 root root
+/home/user/ 0700 user user
+/root/ 0700 root root
+/boot/ 0700 root root
+/etc/permission-hardening.conf 0600 root root