diff --git a/internal/ihop/user_layer_creator.go b/internal/ihop/user_layer_creator.go
index b45d457..e9d85bf 100644
--- a/internal/ihop/user_layer_creator.go
+++ b/internal/ihop/user_layer_creator.go
@@ -87,7 +87,7 @@ func (c UserLayerCreator) Create(image Image, def DefinitionImage, _ SBOM) (Laye
 	err = tw.WriteHeader(&tar.Header{
 		Typeflag: tar.TypeDir,
 		Name:     "home/cnb",
-		Mode:     int64(os.ModePerm),
+		Mode:     int64(os.FileMode(0750)),
 		Uid:      def.UID,
 		Gid:      def.GID,
 	})