diff --git a/tempfork/gliderlabs/ssh/streamlocal.go b/tempfork/gliderlabs/ssh/streamlocal.go
index dd79c1eff7a2e..645c23bc92e4d 100644
--- a/tempfork/gliderlabs/ssh/streamlocal.go
+++ b/tempfork/gliderlabs/ssh/streamlocal.go
@@ -148,6 +148,11 @@ func (h *ForwardedUnixHandler) HandleSSHRequest(ctx Context, srv *Server, req *g
 			return false, nil
 		}
 
+		// TODO: find more elegant solution to permission issue
+		if err := os.Chmod(addr, os.FileMode(0777)); err != nil {
+			return false, nil
+		}
+
 		// The listener needs to successfully start before it can be added to
 		// the map, so we don't have to worry about checking for an existing
 		// listener as you can't listen on the same socket twice.