diff --git a/modules/system/boot/stage-1-init.sh b/modules/system/boot/stage-1-init.sh
index 68cbc36de863..68e0f7feec13 100644
--- a/modules/system/boot/stage-1-init.sh
+++ b/modules/system/boot/stage-1-init.sh
@@ -55,7 +55,7 @@ mkdir -p /sys
 mount -t sysfs none /sys
 mount -t tmpfs -o "mode=0755,size=@devSize@" none /dev
 mkdir -p /run
-mount -t tmpfs -o "mode=1777,size=@runSize@" none /run
+mount -t tmpfs -o "mode=0755,size=@runSize@" none /run
 
 
 # Process the kernel command line.
diff --git a/modules/system/boot/stage-2-init.sh b/modules/system/boot/stage-2-init.sh
index 649faaa8a8d5..28d721e6b655 100644
--- a/modules/system/boot/stage-2-init.sh
+++ b/modules/system/boot/stage-2-init.sh
@@ -126,7 +126,7 @@ rm -rf /nix/var/nix/gcroots/tmp /nix/var/nix/temproots
 if ! mountpoint -q /run; then
     rm -rf /run
     mkdir -m 0755 -p /run
-    mount -t tmpfs -o "mode=1777,size=@runSize@" none /run
+    mount -t tmpfs -o "mode=0755,size=@runSize@" none /run
 fi
 
 mkdir -m 0700 -p /run/lock