diff --git a/internal/backend/fs.go b/internal/backend/fs.go
index c9d35dd213..8a776f07bc 100644
--- a/internal/backend/fs.go
+++ b/internal/backend/fs.go
@@ -122,7 +122,7 @@ func (s *storageFS) CreateObject(obj Object) error {
 	if err != nil {
 		return err
 	}
-	return ioutil.WriteFile(filepath.Join(s.rootDir, url.PathEscape(obj.BucketName), url.PathEscape(obj.Name)), encoded, 0664)
+	return ioutil.WriteFile(filepath.Join(s.rootDir, url.PathEscape(obj.BucketName), url.PathEscape(obj.Name)), encoded, 0600)
 }
 
 // ListObjects lists the objects in a given bucket with a given prefix and