diff --git a/etc/init-browser-policies.bash b/etc/init-browser-policies.bash
index 61282d9a..522cfeb6 100755
--- a/etc/init-browser-policies.bash
+++ b/etc/init-browser-policies.bash
@@ -11,6 +11,7 @@ fi
 
 # Firefox and LibreWolf (caution! https://codeberg.org/librewolf/issues/issues/1767)
 mkdir -vp /etc/firefox/policies
+setfacl --recursive --modify=u:root:rw,o:rx /etc/firefox/policies
 chmod -v a+rx /etc/firefox/
 chmod -v a+rx /etc/firefox/policies/
 touch /etc/firefox/policies/policies.json
@@ -30,25 +31,30 @@ ln -fnsv /etc/firefox /etc/firefox-esr
 
 # Chromium
 mkdir -vp /etc/opt/chromium/policies/{managed,recommended}
+setfacl --recursive --modify=u:root:rw,o:rx /etc/firefox/policies
 chmod -v a+rx /etc/opt/chromium/policies/
 chmod -v a+rx /etc/opt/chromium/policies/{managed,recommended}/
 
 # Brave
 mkdir -p /etc/brave
+setfacl --recursive --modify=u:root:rw,o:rx /etc/brave
 ln -fnsv /etc/opt/chromium/policies /etc/brave/policies
 
 # Vivaldi
 mkdir -p /etc/chromium
+setfacl --recursive --modify=u:root:rw,o:rx /etc/chromium
 ln -fnsv /etc/opt/chromium/policies /etc/chromium/policies
 
 # Google Chrome
 mkdir -p /etc/opt/chrome
+setfacl --recursive --modify=u:root:rw,o:rx /etc/opt/chrome
 ln -fnsv /etc/opt/chromium/policies /etc/opt/chrome/policies
 
 # Microsoft Edge
 # I used to have a separate policy for it so remember to remove this manually
 # if it exists!
 mkdir -p /etc/opt/edge
+setfacl --recursive --modify=u:root:rw,o:rx /etc/opt/edge
 ln -fnsv /etc/opt/chromium/policies /etc/opt/edge/policies
 
 set +x