diff --git a/nightly.sh b/nightly.sh
index 8a9e146..b4f5a35 100755
--- a/nightly.sh
+++ b/nightly.sh
@@ -87,6 +87,8 @@ SECONDARY_LOCATION="https://dl.fedoraproject.org$RSYNCSECTARGET"
 fedmsg_json_start=$(printf '{"log": "start", "branch": "%s", "arch": "%s", "short": "%s", "compose_id": "%s", "location": "%s", "alt_location": "%s", "secondary_location": "%s"}' "$RELEASE" "$ARCH" "$SHORT" "$NEWCOMPOSE_ID", "$LOCATION", "$ALT_LOCATION", "$SECONDARY_LOCATION")
 fedmsg_json_done=$(printf '{"log": "done", "branch": "%s", "arch": "%s", "short": "%s", "compose_id": "%s", "location": "%s", "alt_location": "%s", "secondary_location": "%s"}' "$RELEASE" "$ARCH" "$SHORT" "$NEWCOMPOSE_ID", "$LOCATION", "$ALT_LOCATION", "$SECONDARY_LOCATION")
 
+# Fix permissions on the grub efi files and fonts (they're 0600)
+chmod -R go+r "$DESTDIR/compose/*/*/os/EFI/"
 
 compose-changelog -p $DESTDIR/logs/ $TARGET_DIR/$OLDCOMPOSE_ID/ $DESTDIR/
 # Figure out a version for broken deps e-mail that goes to package maintainers.