diff --git a/Makefile.am b/Makefile.am
index 74a08cb..8271412 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -119,6 +119,7 @@ install-daemon-conf: $(top_builddir)/usbguard-daemon.conf
 	$(MKDIR_P) $(DESTDIR)/$(usbguard_confdir)
 	$(MKDIR_P) $(DESTDIR)/$(usbguard_confdir)/IPCAccessControl.d
 	$(MKDIR_P) $(DESTDIR)/${localstatedir}/log/usbguard
+	chmod 0700 $(DESTDIR)/${localstatedir}/log/usbguard
 	$(INSTALL) -m 600 $(top_builddir)/usbguard-daemon.conf \
 	  $(DESTDIR)/$(usbguard_confdir)/usbguard-daemon.conf
 	if ! test -f "$(DESTDIR)/$(usbguard_confdir)/rules.conf"; then \
diff --git a/usbguard-tmpfiles.conf b/usbguard-tmpfiles.conf
index aff00c5..e90908f 100644
--- a/usbguard-tmpfiles.conf
+++ b/usbguard-tmpfiles.conf
@@ -1 +1 @@
-d /var/log/usbguard 0755 root root - -
+d /var/log/usbguard 0700 root root - -