diff --git a/pkg/bastion/session.go b/pkg/bastion/session.go
index 9292f9e..749591e 100644
--- a/pkg/bastion/session.go
+++ b/pkg/bastion/session.go
@@ -127,7 +127,7 @@ func pipe(lreqs, rreqs <-chan *gossh.Request, lch, rch gossh.Channel, logsLocati
 	channeltype := newChan.ChannelType()
 
 	filename := strings.Join([]string{logsLocation, "/", user, "-", username, "-", channeltype, "-", fmt.Sprint(sessionID), "-", time.Now().Format(time.RFC3339)}, "") // get user
-	f, err := os.OpenFile(filename, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0640)
+	f, err := os.OpenFile(filename, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0440)
 	defer func() {
 		_ = f.Close()
 	}()