diff --git a/nodepool/elements/nodepool-base/post-install.d/89-jenkins-scripts b/nodepool/elements/nodepool-base/post-install.d/89-jenkins-scripts
index 4e36080399..a81028d542 100755
--- a/nodepool/elements/nodepool-base/post-install.d/89-jenkins-scripts
+++ b/nodepool/elements/nodepool-base/post-install.d/89-jenkins-scripts
@@ -29,3 +29,7 @@ cp -a /opt/git/openstack-infra/project-config/jenkins/data \
     /usr/local/jenkins/common_data
 cp -a /opt/git/openstack-infra/project-config/jenkins/scripts \
     /usr/local/jenkins/slave_scripts
+
+# Make sure our sudoers files have the proper permissions.
+chmod 0440 /etc/sudoers.d/jenkins-sudo
+chmod 0440 /etc/sudoers.d/jenkins-sudo-grep
diff --git a/nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo.sudo b/nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo
similarity index 100%
rename from nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo.sudo
rename to nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo
diff --git a/nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo-grep.sudo b/nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo-grep
similarity index 100%
rename from nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo-grep.sudo
rename to nodepool/elements/nodepool-base/static/etc/sudoers.d/jenkins-sudo-grep