diff --git a/cmd/server/macro.bzl b/cmd/server/macro.bzl
index 553979c7258a1..d5be492b7715c 100644
--- a/cmd/server/macro.bzl
+++ b/cmd/server/macro.bzl
@@ -18,6 +18,7 @@ def container_dependencies(targets):
             name = "tar_{}".format(name),
             srcs = [target],
             remap_paths = {"/{}".format(name): "/usr/local/bin/{}".format(name)},
+            modes = {"/usr/local/bin/{}".format(name): "0555"},
         )
 
 def dependencies_tars(targets):