diff --git a/doc/Install.rst b/doc/Install.rst
index 18767c4..6c65988 100644
--- a/doc/Install.rst
+++ b/doc/Install.rst
@@ -172,7 +172,7 @@ git repositories created and managed by gitolite.
 To give apache this permission (required to make git clone via http work),
 we use facl
 ::
-    setfacl -m user:apache:rwx --default
+    setfacl -m user:apache:rx --default
     setfacl -Rdm user:apache:rx /srv/git
     setfacl -Rm user:apache:rx /srv/git