diff --git a/debuild/debian/rules b/debuild/debian/rules
index 5f9f94712f3d72a4023f78ff812db578a1898d52..c00d2c2b6850e2c1c6bb018a6817c04fe954c765 100755
--- a/debuild/debian/rules
+++ b/debuild/debian/rules
@@ -27,6 +27,11 @@ override_dh_auto_install:
 	cd debian/pd-l2ork/usr && mv include/Gem include/pd-l2ork
 # Edit the Gem pkgconfig file accordingly and rename it.
 	cd debian/pd-l2ork/usr/lib/pkgconfig && sed -e 's?/include?/include/pd-l2ork?g' -e 's?/lib/pd/extra?/lib/pd-l2ork/extra?g' < Gem.pc > pd-l2ork-Gem.pc && rm -f Gem.pc
+# Sanitize permissions.
+	cd debian/pd-l2ork && chmod -R go-w * && chmod -R a+r * && chmod a-x usr/lib/pd-l2ork/default.settings
+	find debian/pd-l2ork -name '*.pd_linux' | xargs chmod a-x
+	find debian/pd-l2ork -name '*.pd' | xargs chmod a-x
+	find debian/pd-l2ork -type d | xargs chmod a+x
 
 # NOTE: Older systems use dh_pysupport instead of dh_python2. See
 # http://deb.li/dhs2p.