diff --git a/internal/data/website.go b/internal/data/website.go
index 6ab12559..a06e3880 100644
--- a/internal/data/website.go
+++ b/internal/data/website.go
@@ -391,7 +391,7 @@ location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.env) {
 	// 设置目录权限
 	// sites/site_name 0755 root
 	// sites/site_name/config 0600 root
-	// sites/site_name/log 644 root
+	// sites/site_name/log 0701 root
 	// sites/site_name/public 0755 www
 	if err = io.Chmod(filepath.Join(app.Root, "sites", req.Name), 0755); err != nil {
 		return nil, err
@@ -402,7 +402,7 @@ location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.env) {
 	if err = io.Chown(req.Path, "www", "www"); err != nil {
 		return nil, err
 	}
-	if err = io.Chmod(filepath.Join(app.Root, "sites", req.Name, "log"), 0644); err != nil {
+	if err = io.Chmod(filepath.Join(app.Root, "sites", req.Name, "log"), 0701); err != nil {
 		return nil, err
 	}
 	if err = io.Chmod(filepath.Join(app.Root, "sites", req.Name, "config"), 0600); err != nil {
@@ -704,7 +704,7 @@ func (r *websiteRepo) ResetConfig(id uint) error {
 	if err = io.Chown(website.Path, "www", "www"); err != nil {
 		return err
 	}
-	if err = io.Chmod(filepath.Join(app.Root, "sites", website.Name, "log"), 0644); err != nil {
+	if err = io.Chmod(filepath.Join(app.Root, "sites", website.Name, "log"), 0701); err != nil {
 		return err
 	}
 	if err = io.Chmod(filepath.Join(app.Root, "sites", website.Name, "config"), 0600); err != nil {