diff --git a/Dockerfile b/Dockerfile
index 61d814a..2bc615c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,8 @@ RUN apk add --no-cache \
     dropbear-convert=~${DROPBEAR_VERSION_PREFIX} && \
     addgroup -S plugin && \
     adduser -S plugin -G plugin
-COPY --chown=root:plugin --chmod=777 copy.sh /bin/plugin_scp
+COPY --chown=root:plugin copy.sh /bin/plugin_scp
+RUN chmod 750 /bin/plugin_scp
 USER plugin
 
 ENTRYPOINT ["/bin/plugin_scp"]