diff --git a/datamodels/2.x/itop-backup/dbrestore.class.inc.php b/datamodels/2.x/itop-backup/dbrestore.class.inc.php
index 984f8463a7..a849a47934 100644
--- a/datamodels/2.x/itop-backup/dbrestore.class.inc.php
+++ b/datamodels/2.x/itop-backup/dbrestore.class.inc.php
@@ -186,7 +186,7 @@ class DBRestore extends DBBackup
 		$sConfigFile = APPROOT.'conf/'.$sEnvironment.'/config-itop.php';
 		@chmod($sConfigFile, 0770); // Allow overwriting the file
 		rename($sDataDir.'/config-itop.php', $sConfigFile);
-		@chmod($sConfigFile, 0444); // Read-only
+		@chmod($sConfigFile, 0440); // Read-only
 
 		try
 		{
diff --git a/datamodels/2.x/itop-config/config.php b/datamodels/2.x/itop-config/config.php
index 92cd2889fc..bfff5096ec 100644
--- a/datamodels/2.x/itop-config/config.php
+++ b/datamodels/2.x/itop-config/config.php
@@ -176,7 +176,7 @@ try
                         $oTempConfig = new Config($sTmpFile, true);
                         $oTempConfig->WriteToFile($sConfigFile);
                         @unlink($sTmpFile);
-                        @chmod($sConfigFile, 0444); // Read-only
+                        @chmod($sConfigFile, 0440); // Read-only
 
 	                    if (DBPasswordInNewConfigIsOk($sConfig))
 	                    {