diff --git a/install/alternc.install b/install/alternc.install
index 2179af3a..f430b7e9 100644
--- a/install/alternc.install
+++ b/install/alternc.install
@@ -91,6 +91,8 @@ if [ -r /etc/alternc/my.cnf ]; then
     # * convert mysql variables into our MYSQL_ naming convention (;s)
     # * print the result (;p)
     eval `sed -n -e "/=/{s/ *= *\"\?/='/;s/\"\?\$/'/;s/host/MYSQL_HOST/;s/user/MYSQL_USER/;s/password/MYSQL_PASS/;s/database/MYSQL_DATABASE/;p}" /etc/alternc/my.cnf`
+    chown root:www-data /etc/alternc/my.cnf
+    chmod 640 /etc/alternc/my.cnf
 fi
 
 WARNING="WARNING: Do not edit this file, edit the one in /etc/alternc/templates and launch alternc.install again."