diff --git a/libexec/dma/dmagent/Makefile b/libexec/dma/dmagent/Makefile
--- a/libexec/dma/dmagent/Makefile
+++ b/libexec/dma/dmagent/Makefile
@@ -17,6 +17,7 @@
 	util.c
 MAN8=	dma.8
 MLINKS=	dma.8 dma.conf.5
+CONFMODE= 0640
 CONFS=	dma.conf
 CONFSDIR=	${CONFDIR}/dma
 CFLAGS+=	-DOPENSSL_API_COMPAT=0x10100000L