diff --git a/hubblestack_nova_profiles/cis/centos-7-level-1-scored-v2-2-0.yaml b/hubblestack_nova_profiles/cis/centos-7-level-1-scored-v2-2-0.yaml
index 505ddfe..91da5df 100644
--- a/hubblestack_nova_profiles/cis/centos-7-level-1-scored-v2-2-0.yaml
+++ b/hubblestack_nova_profiles/cis/centos-7-level-1-scored-v2-2-0.yaml
@@ -840,7 +840,7 @@ stat:
       - /etc/gshadow:
           gid: 0
           group: root
-          mode: '000'
+          mode: '600'
           tag: CIS-6.1.5
           uid: 0
           user: root
@@ -885,7 +885,7 @@ stat:
       - /etc/gshadow-:
           gid: 0
           group: root
-          mode: '000'
+          mode: '600'
           tag: CIS-6.1.9
           uid: 0
           user: root