diff --git a/lib/portron.default/xzm/000-kernel.xzm b/lib/portron.default/xzm/000-kernel.xzm
index 413047c..0d63254 100644
Binary files a/lib/portron.default/xzm/000-kernel.xzm and b/lib/portron.default/xzm/000-kernel.xzm differ
diff --git a/lib/portron.default/xzm/001-core.xzm b/lib/portron.default/xzm/001-core.xzm
index 8840cc4..e792d3a 100644
Binary files a/lib/portron.default/xzm/001-core.xzm and b/lib/portron.default/xzm/001-core.xzm differ
diff --git a/src/initrd/init b/src/initrd/init
index 182ec79..667712b 100755
--- a/src/initrd/init
+++ b/src/initrd/init
@@ -201,7 +201,9 @@ aufs_setup() {
         mount -nt squashfs -o loop /memory/copy2ram/${x} /memory/images/${x} 2>/dev/null
         if [ $? -eq 0 ]; then
             mount -no remount,add:1:/memory/images/${x}=rr aufs /union
+            # export flag to var/run so we can easily know if a module is loaded
             touch /union/var/run/portron/mod.${x}
+            chmod 400 /union/var/run/portron/mod.${x}
         else
             escape "Cannot read $x. Corrupted module?"
         fi
diff --git a/src/initrd/init.config b/src/initrd/init.config
index c8bcc16..103dc22 100644
--- a/src/initrd/init.config
+++ b/src/initrd/init.config
@@ -125,7 +125,7 @@ expKernel() {
 
    [ "${val}" ] && {
         touch ${fil}
-        chmod a-w ${fil}
+        chmod 400 ${fil}
         logme "- enabling kp $1"
    } || {
         [ -f ${fil} ] && {