diff --git a/test/units/testsuite-70.sh b/test/units/testsuite-70.sh
index e88547a735f..16d6c901f71 100755
--- a/test/units/testsuite-70.sh
+++ b/test/units/testsuite-70.sh
@@ -41,6 +41,8 @@ tpm_check_failure_with_wrong_pin() {
 img="/tmp/test.img"
 truncate -s 20M "$img"
 echo -n passphrase >/tmp/passphrase
+# Change file mode to avoid "/tmp/passphrase has 0644 mode that is too permissive" messages
+chmod 0600 /tmp/passphrase
 cryptsetup luksFormat -q --pbkdf pbkdf2 --pbkdf-force-iterations 1000 --use-urandom "$img" /tmp/passphrase
 
 # Unlocking via keyfile
@@ -259,6 +261,8 @@ cryptenroll_wipe_and_check() {(
 img="/tmp/cryptenroll.img"
 truncate -s 20M "$img"
 echo -n password >/tmp/password
+# Change file mode to avoid "/tmp/password has 0644 mode that is too permissive" messages
+chmod 0600 /tmp/password
 cryptsetup luksFormat -q --pbkdf pbkdf2 --pbkdf-force-iterations 1000 --use-urandom "$img" /tmp/password
 
 # Enroll additional tokens, keys, and passwords to exercise the list and wipe stuff