diff --git a/nodepool/elements/initialize-urandom/post-install.d/80-initialize-urandom b/nodepool/elements/initialize-urandom/post-install.d/80-initialize-urandom
index b9920ba4ca..6174349ce6 100755
--- a/nodepool/elements/initialize-urandom/post-install.d/80-initialize-urandom
+++ b/nodepool/elements/initialize-urandom/post-install.d/80-initialize-urandom
@@ -8,6 +8,7 @@ set -o pipefail
 
 case "$DIB_INIT_SYSTEM" in
     systemd)
+        sudo chmod 0644 /usr/lib/systemd/system/initialize-urandom.service
         systemctl enable initialize-urandom.service
         ;;
     *)
diff --git a/nodepool/elements/initialize-urandom/static/usr/local/bin/initialize-urandom.py b/nodepool/elements/initialize-urandom/static/usr/local/bin/initialize-urandom.py
old mode 100644
new mode 100755