diff --git a/client/scripts/netbsd b/client/scripts/netbsd
index 819bfd24..e5d3df2c 100755
--- a/client/scripts/netbsd
+++ b/client/scripts/netbsd
@@ -68,6 +68,7 @@ if [ x$reason = xBOUND ] || [ x$reason = xRENEW ] || \
     route add $alias_ip_address 127.0.0.1
   fi
   echo search $new_domain_name >/etc/resolv.conf
+  chmod 644 /etc/resolv.conf
   for nameserver in $new_domain_name_servers; do
     echo nameserver $nameserver >>/etc/resolv.conf
   done
@@ -115,6 +116,7 @@ if [ x$reason = xTIMEOUT ]; then
       route add default $router >/dev/null 2>&1
     done
     echo search $new_domain_name >/etc/resolv.conf.std
+    chmod 644 /etc/resolv.conf.std
     for nameserver in $new_domain_name_servers; do
       echo nameserver $nameserver >>/etc/resolv.conf.std
     done