diff --git a/MANIFEST.in b/MANIFEST.in
index 9a887c9..30dc6af 100644
--- a/MANIFEST.in
+++ b/MANIFEST.in
@@ -1,7 +1,8 @@
-recursive-include debian changelog compat control copyright rules msrprelay.init
+recursive-include debian changelog compat control copyright rules
+recursive-include debian *.init *.lintian-overrides
 recursive-include test   README *.py
 recursive-include tls    README *.sh
 prune debian/tmp
 prune debian/msrprelay
 prune debian/python-module-stampdir
 include config.ini.sample MANIFEST.in LICENSE INSTALL Changelog
diff --git a/debian/msrprelay.lintian-overrides b/debian/msrprelay.lintian-overrides
new file mode 100644
index 0000000..8fe2ff1
--- /dev/null
+++ b/debian/msrprelay.lintian-overrides
@@ -0,0 +1,2 @@
+# This file will contain passwords.
+msrprelay: non-standard-file-perm etc/msrprelay/config.ini 0600 != 0644
diff --git a/debian/rules b/debian/rules
index 0cff45a..ff56bb6 100644
--- a/debian/rules
+++ b/debian/rules
@@ -1,15 +1,19 @@
 #!/usr/bin/make -f
 
 #export DH_VERBOSE=1
 
 %:
 	dh $@ --with python2 --buildsystem=pybuild
 
 override_dh_clean:
 	dh_clean
 	rm -rf build dist MANIFEST
 
 override_dh_auto_install:
 	dh_auto_install
 	mv debian/msrprelay/etc/msrprelay/config.ini.sample debian/msrprelay/etc/msrprelay/config.ini
 
+override_dh_fixperms:
+	dh_fixperms
+	chmod 600 debian/msrprelay/etc/msrprelay/config.ini
+