diff --git a/htagweb/fifo.py b/htagweb/fifo.py
index 35e94a7..d023ae7 100644
--- a/htagweb/fifo.py
+++ b/htagweb/fifo.py
@@ -50,8 +50,10 @@ def createPipes(self):  # for server
 
         if not os.path.exists(self.CLIENT_TO_SERVER_FIFO):
             os.mkfifo(self.CLIENT_TO_SERVER_FIFO)
+            os.chmod(self.CLIENT_TO_SERVER_FIFO, 0o700)
         if not os.path.exists(self.SERVER_TO_CLIENT_FIFO):
             os.mkfifo(self.SERVER_TO_CLIENT_FIFO)
+            os.chmod(self.SERVER_TO_CLIENT_FIFO, 0o700)
 
     def removePipes(self):  # for server
         if os.path.exists(self.CLIENT_TO_SERVER_FIFO):
diff --git a/htagweb/hrprocess.py b/htagweb/hrprocess.py
index 8f6faaa..03e9900 100644
--- a/htagweb/hrprocess.py
+++ b/htagweb/hrprocess.py
@@ -49,6 +49,8 @@ async def sendactions(actions:dict) -> bool:
         try:
             if not os.path.exists(f.UPDATE_FIFO):
                 os.mkfifo(f.UPDATE_FIFO)
+                os.chmod(f.UPDATE_FIFO, 0o700)
+
 
             async with aiofiles.open(f.UPDATE_FIFO, mode='w') as fifo_update:
                 log("sendactions (update):",actions)