fix remark: always remove write permissions for group/other