diff --git a/manifests/puppetdb/files.pp b/manifests/puppetdb/files.pp
index ec9f462..6c52216 100644
--- a/manifests/puppetdb/files.pp
+++ b/manifests/puppetdb/files.pp
@@ -58,9 +58,9 @@ class puppet_cd::puppetdb::files (
     file { $pt_puppetdb_config_ini:
       ensure   => file,
       path     => $pt_puppetdb_config_ini,
-      owner    => $pt_db_user,
-      group    => $pt_db_user,
-      mode     => '0640',
+      owner    => 'root',
+      group    => 'root',
+      mode     => '0644',
       selrange => s0,
       selrole  => object_r,
       seltype  => puppet_etc_t,
@@ -73,9 +73,9 @@ class puppet_cd::puppetdb::files (
     file { $pt_puppetdb_database_ini:
       ensure   => file,
       path     => $pt_puppetdb_database_ini,
-      owner    => $pt_db_user,
-      group    => $pt_db_user,
-      mode     => '0640',
+      owner    => 'root',
+      group    => 'root',
+      mode     => '0644',
       selrange => s0,
       selrole  => object_r,
       seltype  => puppet_etc_t,
@@ -88,9 +88,9 @@ class puppet_cd::puppetdb::files (
     file { $pt_puppetdb_jetty_ini :
       ensure   => file,
       path     => $pt_puppetdb_jetty_ini ,
-      owner    => $pt_db_user,
-      group    => $pt_db_user,
-      mode     => '0640',
+      owner    => 'root',
+      group    => 'root',
+      mode     => '0644',
       selrange => s0,
       selrole  => object_r,
       seltype  => puppet_etc_t,
@@ -103,9 +103,9 @@ class puppet_cd::puppetdb::files (
     file { $pt_puppetdb_repl_ini:
       ensure   => file,
       path     => $pt_puppetdb_repl_ini,
-      owner    => $pt_db_user,
-      group    => $pt_db_user,
-      mode     => '0640',
+      owner    => 'root',
+      group    => 'root',
+      mode     => '0644',
       selrange => s0,
       selrole  => object_r,
       seltype  => puppet_etc_t,