diff --git a/data/hooks/conf_regen/01-yunohost b/data/hooks/conf_regen/01-yunohost
index 8b7a7c6fc..a6d672f57 100755
--- a/data/hooks/conf_regen/01-yunohost
+++ b/data/hooks/conf_regen/01-yunohost
@@ -128,6 +128,11 @@ do_post_regen() {
   # Enfore permissions #
   ######################
 
+  chmod 750 /home/yunohost.conf
+  chmod 750 /home/yunohost.backup
+  chmod 750 /home/yunohost.backup/archives
+  chown root:root /home/yunohost.conf
+  chown admin:root /home/yunohost.backup
   chown admin:root /home/yunohost.backup/archives
 
   # Certs
diff --git a/debian/changelog b/debian/changelog
index 67ebebe45..0454553ae 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,12 @@ yunohost (4.2) unstable; urgency=low
 
  -- Alexandre Aubin <alex.aubin@mailoo.org>  Wed, 20 Jan 2021 05:19:58 +0100
 
+yunohost (4.1.7.4) stable; urgency=low
+
+  - [fix] sec: Enforce permissions for /home/yunohost.backup and .conf (41b5a123)
+
+ -- Alexandre Aubin <alex.aubin@mailoo.org>  Thu, 11 Mar 2021 03:08:10 +0100
+
 yunohost (4.1.7.3) stable; urgency=low
 
   - [fix] log: Some secrets were not redacted (0c172cd3)