--- systemd-stable-250/tmpfiles.d/legacy.conf.in.orig	2021-12-27 11:37:45.454887047 +0100
+++ systemd-stable-250/tmpfiles.d/legacy.conf.in	2021-12-27 11:39:02.180866644 +0100
@@ -10,7 +10,7 @@
 # These files are considered legacy and are unnecessary on legacy-free
 # systems.
 
-d /run/lock 0755 root root -
+d /run/lock 1771 root root -
 L /var/lock - - - - ../run/lock
 {% if CREATE_LOG_DIRS %}
 L /var/log/README - - - - ../..{{DOC_DIR}}/README.logs
@@ -19,7 +19,7 @@
 # /run/lock/subsys is used for serializing SysV service execution, and
 # hence without use on SysV-less systems.
 
-d /run/lock/subsys 0755 root root -
+d /run/lock/subsys 0700 root root -
 
 # /forcefsck, /fastboot and /forcequotacheck are deprecated in favor of the
 # kernel command line options 'fsck.mode=force', 'fsck.mode=skip' and