diff --git a/standard/generic-growfs.yaml b/standard/generic-growfs.yaml
index 5f4e0af..0604cdb 100644
--- a/standard/generic-growfs.yaml
+++ b/standard/generic-growfs.yaml
@@ -8,5 +8,6 @@ postprocess:
   - |
     #!/bin/bash
     set -xeuo pipefail
+    chmod 0644 /usr/lib/systemd/system/bootc-generic-growpart.service
     mkdir -p /usr/lib/systemd/system/local-fs.target.wants
     ln -s ../bootc-generic-growpart.service /usr/lib/systemd/system/local-fs.target.wants/bootc-generic-growpart.service