diff --git a/plugins/rsyncd/index.py b/plugins/rsyncd/index.py
index 7802b699a..eb4d7016c 100755
--- a/plugins/rsyncd/index.py
+++ b/plugins/rsyncd/index.py
@@ -295,6 +295,7 @@ def cmdRec():
     ip = public.getLocalIp()
 
     cmd = 'echo "' + pwd_list[an] + '" > /tmp/p.pass' + "<br>"
+    cmd = 'chmod 600 /tmp/p.pass' + "<br>"
     cmd += 'rsync -arv --password-file=/tmp/p.pass --progress --delete  /project  ' + \
         an + '@' + ip + '::' + an
     return public.returnJson(True, 'OK!', cmd)