diff --git a/seafile/rootfs/etc/cont-init.d/99-run.sh b/seafile/rootfs/etc/cont-init.d/99-run.sh
index af9baecfa9..5ca2c0a71e 100755
--- a/seafile/rootfs/etc/cont-init.d/99-run.sh
+++ b/seafile/rootfs/etc/cont-init.d/99-run.sh
@@ -129,6 +129,7 @@ if [[ -n "${ADMIN_EMAIL_VAL}" && "${ADMIN_EMAIL_VAL}" != "null" \
         printf 'SEAFILE_ADMIN_PASSWORD=%q\n' "${ADMIN_PASSWORD_VAL}"
     } >> "${SEAFILE_ENV_FILE}"
     chown seafile:seafile "${SEAFILE_ENV_FILE}"
+    chmod 600 "${SEAFILE_ENV_FILE}"
 fi
 
 #############################################