diff --git a/modules/microvm.nix b/modules/microvm.nix
index 69c08b07..d46d0443 100644
--- a/modules/microvm.nix
+++ b/modules/microvm.nix
@@ -178,7 +178,7 @@ in
     };
 
     systemd.tmpfiles.rules = [
-      "d /home/root 0600 root root -" # createHome does not create it
+      "d /home/root 0700 root root -" # createHome does not create it
     ];
 
     users = {