diff --git a/recipes/config.rb b/recipes/config.rb
index 0424fcc..7e7b8ca 100644
--- a/recipes/config.rb
+++ b/recipes/config.rb
@@ -8,6 +8,9 @@
 end
 
 template '/var/lib/lacework/config/config.json' do
+  owner 'root'
+  group 'root'
+  mode '0640'
   source 'config.json.erb'
   variables(
     config: node['chef-lacework']['config']