Index: branches/releng-11/nanobsd/cfg/nanobsd.wleiden
===================================================================
--- branches/releng-11/nanobsd/cfg/nanobsd.wleiden	(revision 14229)
+++ branches/releng-11/nanobsd/cfg/nanobsd.wleiden	(revision 14243)
@@ -235,4 +235,13 @@
 
 
+# Monit permissions needs to be more restrictive which cannot be set by
+# repository tooling
+cust_monitrc_permissions () (
+	if [ -r ${NANO_WORLDDIR}/usr/local/etc/monitrc ]; then
+		chroot ${NANO_WORLDDIR} sh -c "chmod 0600 /usr/local/etc/monitrc"
+	fi
+)
+
+
 # Assuming we are running a safe envirionment where snooping could occur during or after the build
 cust_set_root_password() (
@@ -445,4 +454,5 @@
 customize_cmd cust_unbound_rights
 customize_cmd cust_update_databases
+customize_cmd cust_monitrc_permissions
 #customize_cmd cust_apply_nanobsd_patches
 late_customize_cmd late_cust_unset_common_var_and_tmp