diff --git a/pkg/selfcontain/config.go b/pkg/selfcontain/config.go
index 1eec2e7a14cdcc87d85905d601f0ac87c29d982d..e73b7f2ce16597d899b6a9ec421f4501d87f01b4 100644
--- a/pkg/selfcontain/config.go
+++ b/pkg/selfcontain/config.go
@@ -55,7 +55,7 @@ func (c *Config) toLibcontainer() (*configs.Config, error) {
 	mounts := []*configs.Mount{}
 	for dest, source := range c.Mounts {
 		c.Logger.Info("setting up mount", "source", source, "dest", dest)
-		err := os.MkdirAll(source, 0o755)
+		err := os.MkdirAll(source, 0o700)
 		if err != nil && !os.IsExist(err) {
 			return nil, err
 		}