diff --git a/pkg/containerd/cmd/service/prepare.go b/pkg/containerd/cmd/service/prepare.go
index 3938744c2..1cf9f7731 100644
--- a/pkg/containerd/cmd/service/prepare.go
+++ b/pkg/containerd/cmd/service/prepare.go
@@ -43,11 +43,11 @@ func prepareRW(path string) error {
 	}
 	upper := filepath.Join(tmp, "upper")
 	// make the mount points
-	if err := os.Mkdir(upper, 0744); err != nil {
+	if err := os.Mkdir(upper, 0755); err != nil {
 		return err
 	}
 	work := filepath.Join(tmp, "work")
-	if err := os.Mkdir(work, 0744); err != nil {
+	if err := os.Mkdir(work, 0755); err != nil {
 		return err
 	}
 	lower := filepath.Join(path, "lower")
diff --git a/pkg/runc/cmd/onboot/prepare.go b/pkg/runc/cmd/onboot/prepare.go
index 3938744c2..1cf9f7731 100644
--- a/pkg/runc/cmd/onboot/prepare.go
+++ b/pkg/runc/cmd/onboot/prepare.go
@@ -43,11 +43,11 @@ func prepareRW(path string) error {
 	}
 	upper := filepath.Join(tmp, "upper")
 	// make the mount points
-	if err := os.Mkdir(upper, 0744); err != nil {
+	if err := os.Mkdir(upper, 0755); err != nil {
 		return err
 	}
 	work := filepath.Join(tmp, "work")
-	if err := os.Mkdir(work, 0744); err != nil {
+	if err := os.Mkdir(work, 0755); err != nil {
 		return err
 	}
 	lower := filepath.Join(path, "lower")