diff --git a/tasks/setup.yaml b/tasks/setup.yaml
index cb90660..00adb23 100644
--- a/tasks/setup.yaml
+++ b/tasks/setup.yaml
@@ -20,6 +20,9 @@
   unarchive:
     src: /opt/telegram-desktop/{{_telegram_desktop_dl_filename}}
     dest: /opt/telegram-desktop
+    mode: u=rwx,g=rx,o=rx
+    owner: root
+    group: root
 
 - name: link telegram-desktop binary
   file: