diff --git a/cloud-init-templates/boothook_centos.jinja2 b/cloud-init-templates/boothook_centos.jinja2
index 732bf752..09c9cc47 100644
--- a/cloud-init-templates/boothook_centos.jinja2
+++ b/cloud-init-templates/boothook_centos.jinja2
@@ -103,7 +103,8 @@ cloud-init-per instance skel_bash cp -f /etc/skel/.bash* /root/
 
 # Puppet config
 cloud-init-per instance hiera_puppet mkdir -p /etc/puppet /var/lib/hiera
-cloud-init-per instance touch_puppet touch /var/lib/hiera/common.yaml /etc/puppet/hiera.yaml
+cloud-init-per instance touch_puppet touch /var/lib/hiera/common.yaml /etc/puppet/hiera.yaml /var/log/puppet.log
+cloud-init-per instance chmod_puppet chmod 600 /var/log/puppet.log
 
 # Mcollective enable
 cloud-init-per instance mcollective_enable sed -i /etc/rc.d/init.d/mcollective -e 's/\(# chkconfig:\s\+[-0-6]\+\) [0-9]\+ \([0-9]\+\)/\1 81 \2/'
diff --git a/cloud-init-templates/boothook_ubuntu.jinja2 b/cloud-init-templates/boothook_ubuntu.jinja2
index e3c7dd91..8d7e89a0 100644
--- a/cloud-init-templates/boothook_ubuntu.jinja2
+++ b/cloud-init-templates/boothook_ubuntu.jinja2
@@ -93,4 +93,5 @@ cloud-init-per instance nailgun_agent_1 /bin/sh -c 'echo "flock -w 0 -o /var/loc
 cloud-init-per instance skel_bash cp -f /etc/skel/.bash* /root/
 
 cloud-init-per instance hiera_puppet mkdir -p /etc/puppet /var/lib/hiera
-cloud-init-per instance touch_puppet touch /var/lib/hiera/common.yaml /etc/puppet/hiera.yaml
+cloud-init-per instance touch_puppet touch /var/lib/hiera/common.yaml /etc/puppet/hiera.yaml /var/log/puppet.log
+cloud-init-per instance chmod_puppet chmod 600 /var/log/puppet.log