treewide: fix permissions