diff --git a/debian/gitlab-ci.yml b/debian/gitlab-ci.yml
index a53fcfb13e7c3e37b34567ed49abaaf96c089a99..eba6f0e0e3da93e514a581a68c4c2681b1c5cc21 100644
--- a/debian/gitlab-ci.yml
+++ b/debian/gitlab-ci.yml
@@ -93,6 +93,8 @@ package:
         STEAM_CI_DEB_BUILD: full    # debuild --build=full, aka -F
         STEAM_CI_INSTALL_SCRIPT: |
             apt-get -y install pkg-create-dbgsym
+            chmod -R a+rX,og-w .
+            umask 022
 
 package:i386:
     extends: .build_package