diff --git a/bundles/sudo/items.py b/bundles/sudo/items.py
index f31b8c3..70120a9 100644
--- a/bundles/sudo/items.py
+++ b/bundles/sudo/items.py
@@ -13,5 +13,5 @@ for user, commands in node.metadata.get('sudoers').items():
             'user': user,
             'commands': commands,
         },
-        'mode': '500',
+        'mode': '0440',
     }