diff --git a/src/util/taler-exchange-secmod-eddsa.c b/src/util/taler-exchange-secmod-eddsa.c
index 48dcdf718..5ca50f062 100644
--- a/src/util/taler-exchange-secmod-eddsa.c
+++ b/src/util/taler-exchange-secmod-eddsa.c
@@ -1549,7 +1549,8 @@ run (void *cls,
     }
     /* Set sticky group bit, so that clients will be writeable by the current service. */
     if (0 != chmod (client_dir,
-                    S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP | S_ISGID))
+                    S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IWGRP | S_IXGRP
+                    | S_ISGID))
     {
       GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
                   "Can't set permissions for client directory (%s)\n",
diff --git a/src/util/taler-exchange-secmod-rsa.c b/src/util/taler-exchange-secmod-rsa.c
index 1307b8f45..edb3aac21 100644
--- a/src/util/taler-exchange-secmod-rsa.c
+++ b/src/util/taler-exchange-secmod-rsa.c
@@ -1923,7 +1923,8 @@ run (void *cls,
     }
     /* Set sticky group bit, so that clients will be writeable by the current service. */
     if (0 != chmod (client_dir,
-                    S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IXGRP | S_ISGID))
+                    S_IRUSR | S_IWUSR | S_IXUSR | S_IRGRP | S_IWGRP | S_IXGRP
+                    | S_ISGID))
     {
       GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
                   "Can't set permissions for client directory (%s)\n",