diff --git a/etc/permission-hardening.d/30_compilers.conf b/etc/permission-hardening.d/30_compilers.conf
new file mode 100644
index 00000000..87a171ca
--- /dev/null
+++ b/etc/permission-hardening.d/30_compilers.conf
@@ -0,0 +1,5 @@
+/usr/bin/as 0700 root root
+/usr/bin/g++ 0700 root root
+/usr/bin/gcc 0700 root root
+/usr/bin/cc 0700 root root
+/usr/bin/clang 0700 root root