diff --git a/tasks/sieve_train_from_junk.yml b/tasks/sieve_train_from_junk.yml
index 2708f1b..acc1464 100644
--- a/tasks/sieve_train_from_junk.yml
+++ b/tasks/sieve_train_from_junk.yml
@@ -23,14 +23,17 @@
   file:
     path: /etc/dovecot/sieve
     state: directory
+    mode: 0755
+    owner: root
+    group: root
 
 - name: copy global sieve files
   copy:
     src: "{{ item }}"
     dest: "/etc/dovecot/sieve/{{ item }}"
+    mode: 0644
 #    owner: vmail
 #    group: vmail
-#    mode: 0500
 #  become: yes
 #  become_user: vmail
   with_items:
@@ -52,7 +55,9 @@
   copy:
     src: "{{ item }}"
     dest: "/etc/dovecot/sieve/{{ item }}"
-    mode: a+x
+    owner: root
+    group: root
+    mode: 0755
   with_items:
     - rspamd-learn-spam.sh
     - rspamd-learn-ham.sh