diff --git a/build/run/docker-entrypoint/init.d/15-opendkimmarc.sh b/build/run/docker-entrypoint/init.d/15-opendkimmarc.sh
index 21799e2..c2da4d2 100755
--- a/build/run/docker-entrypoint/init.d/15-opendkimmarc.sh
+++ b/build/run/docker-entrypoint/init.d/15-opendkimmarc.sh
@@ -4,7 +4,8 @@ domains=(${MYVEMAIL_DOMAIN})
 domains+=(${MYVEMAIL_ADDMX//,/ })
 
 # Permissions
-chmod go-rw /etc/opendkim/keys
+chmod go-rw /etc/opendkim/keys/
+chown root:root -R /etc/opendkim/keys/
 
 # Remove socks
 rm -f /var/spool/postfix/opendkim/opendkim.sock \
@@ -38,7 +39,6 @@ done
 sed -i "s/{{HOSTNAME}}/${MYVEMAIL_SUBDOMAIN}.${MYVEMAIL_DOMAIN}/" ${MYVEMAIL_OPENDMARC_CONF}
 
 # Permissions
-chown root:root -R /etc/opendkim/keys/
 chown opendkim:opendkim /etc/opendkim/keys/*/default.private
 chmod 600 /etc/opendkim/keys/*/default.private