diff --git a/.github/workflows/banners.yml b/.github/workflows/banners.yml
index c3a89cb6..d4281c43 100644
--- a/.github/workflows/banners.yml
+++ b/.github/workflows/banners.yml
@@ -11,6 +11,8 @@ jobs:
         run: ansible-playbook -v harden.yml --tags lynis --skip-tags slackware,centos
       - name: Run Ansible playbook for banners
         run: ansible-playbook -v harden.yml --tags banners --extra-vars run_lynis_after_hardening=true
+      - name: chmod Lynis log
+        run: chmod -c 644 /var/log/lynis.log
       - name: Archive Lynis log
         uses: actions/upload-artifact@v4
         with: