diff --git a/config.ts b/config.ts
index fa447c40..3492fb8b 100644
--- a/config.ts
+++ b/config.ts
@@ -203,8 +203,9 @@ process.on('SIGINT', () => {
 });
 
 try {
-  fs.mkdirSync(path.join(argv.rundir, 'db'), {recursive: true});
-  fs.mkdirSync(path.join(argv.rundir, 'temp'), {recursive: true});
+  fs.mkdirSync(path.join(argv.rundir), {recursive: true, mode: 0o700});
+  fs.mkdirSync(path.join(argv.rundir, 'db'));
+  fs.mkdirSync(path.join(argv.rundir, 'temp'));
 } catch (error) {
   console.error('Failed to access runtime directory');
   process.exit(1);