diff --git a/bind/init.sls b/bind/init.sls
index 04de419..55fe58f 100644
--- a/bind/init.sls
+++ b/bind/init.sls
@@ -11,8 +11,8 @@ bind9:
     - name: /etc/named.conf
     - source: salt://bind/files/named.conf
     - user: root
-    - group: root
-    - mode: 644
+    - group: named
+    - mode: 640
     - require:
       - pkg: bind9
   service.running: