diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 26925b881..4f91e6d98 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -411,6 +411,7 @@ tasks.register<Copy>("includeJavaMode") {
     from(java.configurations.runtimeClasspath)
     into(composeResources("modes/java/mode"))
     duplicatesStrategy = DuplicatesStrategy.EXCLUDE
+    dirPermissions { unix("rwx------") }
 }
 tasks.register<Copy>("includeJdk") {
     from(Jvm.current().javaHome.absolutePath)
diff --git a/java/build.gradle.kts b/java/build.gradle.kts
index 47fa76e46..d5d306a2e 100644
--- a/java/build.gradle.kts
+++ b/java/build.gradle.kts
@@ -81,6 +81,7 @@ legacyLibraries.forEach { library ->
         include("library/**/*")
         include("examples/**/*")
         into( javaMode("/libraries/$library"))
+        dirPermissions { unix("rwx------") };
     }
     bundle.configure {
         dependsOn("library-$library-extraResources")