diff --git a/CHANGELOG.md b/CHANGELOG.md
index edef3aa..a5c7633 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,6 @@ This file is used to list changes made in each version of the cron cookbook.
 
 ## [7.0.30](https://github.com/sous-chefs/cron/compare/7.0.29...v7.0.30) (2025-10-15)
 
-
 ### Bug Fixes
 
 * **ci:** Update workflows to use release pipeline ([#189](https://github.com/sous-chefs/cron/issues/189)) ([c5bc80f](https://github.com/sous-chefs/cron/commit/c5bc80fca65e11fd74d3730c9be7a2dccf1f9960))
diff --git a/resources/access.rb b/resources/access.rb
index 0c84c20..1470e1f 100644
--- a/resources/access.rb
+++ b/resources/access.rb
@@ -32,7 +32,7 @@
       source 'cron_manage.erb'
       cookbook 'cron'
 
-      mode '0660'
+      mode '0600'
 
       variables['users'] ||= []
       variables['users'] << new_resource.user
@@ -49,7 +49,7 @@
       source 'cron_manage.erb'
       cookbook 'cron'
 
-      mode '0660'
+      mode '0600'
 
       variables['users'] ||= []
       variables['users'] << new_resource.user
diff --git a/test/integration/default/inspec/cron_spec.rb b/test/integration/default/inspec/cron_spec.rb
index 453bf23..242ea30 100644
--- a/test/integration/default/inspec/cron_spec.rb
+++ b/test/integration/default/inspec/cron_spec.rb
@@ -48,4 +48,5 @@
 
 describe file('/etc/cron.allow') do
   its('content') { should match /alice/ }
+  its('mode') { should cmp '0600' }
 end