diff --git a/src/modules/preservefiles/preservefiles.conf b/src/modules/preservefiles/preservefiles.conf
index ab9114d20..ac8e1f7db 100644
--- a/src/modules/preservefiles/preservefiles.conf
+++ b/src/modules/preservefiles/preservefiles.conf
@@ -9,13 +9,18 @@
 #   as the source).
 # - a map with a *dest* key. The *dest* value is a path interpreted in the
 #   target system (if dontChroot is true, in the host system). Relative paths
-#   are not recommended. There are two possible other keys in the map:
+#   are not recommended. There are three possible other keys in the map:
 #   - *from*, which must have one of the values, below; it is used to
 #     preserve files whose pathname is known to Calamares internally.
 #   - *src*, to refer to a path interpreted in the host system. Relative
 #     paths are not recommended, and are interpreted relative to where
 #     Calamares is being run.
-#   Only one of the two other keys (either *from* or *src*) may be set.
+#   - *perm*, is a colon-separated tuple of <user>:<group>:<mode>
+#     where <mode> is in octal (e.g. 4777 for wide-open, 0400 for read-only
+#     by owner). If set, the file's ownership and permissions are set to
+#     those values within the target system; if not set, no permissions
+#     are changed.
+#   Only one of the two source keys (either *from* or *src*) may be set.
 #
 # The target filename is modified as follows:
 #   - `@@ROOT@@` is replaced by the path to the target root (may be /)
@@ -32,5 +37,7 @@ files:
   - /etc/oem-information
   - from: log
     dest: /root/install.log
+    perm: root:wheel:644
   - from: config
     dest: /root/install.cfg
+    perm: root:wheel:400