this is needed for resolvconf, which writes resolv.conf as an output and wants to make it world-readable