diff --git a/Containerfile b/Containerfile
index 099597c..3888654 100644
--- a/Containerfile
+++ b/Containerfile
@@ -79,7 +79,7 @@ COPY configs/bootc-fix.conf /usr/lib/tmpfiles.d/bootc-fix.conf
 # sigstoreSigned-Pflicht für eigenes Image, Public-Registries explizit erlaubt
 COPY configs/containers/policy.json /etc/containers/policy.json
 COPY cosign.pub /etc/pki/containers/cosign.pub
-RUN chmod 0644 /etc/containers/policy.json /usr/etc/pki/containers/cosign.pub && \
+RUN chmod 0644 /etc/containers/policy.json /etc/pki/containers/cosign.pub && \
     python3 -m json.tool /etc/containers/policy.json > /dev/null
 
 # 2. Kopiere die Systemd-Overrides als Vendor-Drop-ins (kein /etc/-Override im Image)