diff --git a/cookbooks/vault/install.rb b/cookbooks/vault/install.rb
index 7210f67..eb74047 100644
--- a/cookbooks/vault/install.rb
+++ b/cookbooks/vault/install.rb
@@ -13,6 +13,9 @@ DIST = run_command('lsb_release -cs 2>/dev/null').stdout.chomp
 template '/etc/apt/sources.list.d/hashicorp.list' do
   action :create
   variables(distribution: DIST)
+
+  owner 'root'
+  group 'root'
 end
 
 execute 'apt update' do