diff --git a/manifests/install/archive.pp b/manifests/install/archive.pp
index f6cb208..83658a1 100644
--- a/manifests/install/archive.pp
+++ b/manifests/install/archive.pp
@@ -41,7 +41,10 @@
 
   file { 'tomcat logs directory':
     ensure => directory,
-    path   => "/var/log/${::tomcat::service_name_real}"
+    path   => "/var/log/${::tomcat::service_name_real}",
+    owner  => $::tomcat::tomcat_user_real,
+    group  => $::tomcat::tomcat_group_real,
+    mode   => '0660'
   }
 
   # warn if admin webapps were selected for installation
diff --git a/manifests/instance.pp b/manifests/instance.pp
index 82d6a7a..76928c2 100644
--- a/manifests/instance.pp
+++ b/manifests/instance.pp
@@ -339,7 +339,8 @@
 
   File {
     owner => $::tomcat::tomcat_user_real,
-    group => $::tomcat::tomcat_group_real
+    group => $::tomcat::tomcat_group_real,
+    mode  => '0660'
   }
 
   if !defined(File['tomcat instances root']) {
@@ -414,7 +415,6 @@
     content => template("${module_name}/common/server.xml.erb"),
     owner   => $::tomcat::tomcat_user_real,
     group   => $::tomcat::tomcat_group_real,
-    mode    => '0600',
     notify  => Service[$service_name_real]
   }
 
@@ -428,7 +428,6 @@
     content => template("${module_name}/common/setenv.erb"),
     owner   => $::tomcat::tomcat_user_real,
     group   => $::tomcat::tomcat_group_real,
-    mode    => '0644',
     notify  => Service[$service_name_real]
   }