diff --git a/components/engine/container/container.go b/components/engine/container/container.go
index 23de3f581a..19079adbc7 100644
--- a/components/engine/container/container.go
+++ b/components/engine/container/container.go
@@ -167,7 +167,7 @@ func (container *Container) toDisk() (*Container, error) {
 	}
 
 	// Save container settings
-	f, err := ioutils.NewAtomicFileWriter(pth, 0644)
+	f, err := ioutils.NewAtomicFileWriter(pth, 0600)
 	if err != nil {
 		return nil, err
 	}