diff --git a/Dockerfile b/Dockerfile
index 315bdef32149ac2c6fa8f0e82f8c141c8a73c865..274abf4ad73cb873f5653267ee0d7d03e1a254da 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -55,12 +55,15 @@ RUN set -x && \
 	&& gosu nobody true;
 
 RUN mkdir -p /data/db /data/configdb \
-	&& chown -R mongodb:mongodb /data/db /data/configdb
+	&& chown -R mongodb:mongodb /data/db /data/configdb &&\
+	chmod o-w /etc/pki/ca-trust/source/anchors/Certificates_PKCS7_v5.7_DoD.pem &&\
+	chmod o-w /usr/local/bin/docker-entrypoint.sh
 
 # Disable Ctrl+Alt+Del burst action
 RUN echo CtrlAltDelBurstAction=none >> /etc/systemd/system.conf
 
 COPY LICENSE /licenses/
+RUN chmod o-w /licenses/LICENSE
 
 USER mongodb:mongodb
 ENTRYPOINT ["docker-entrypoint.sh"]