diff --git a/VM_OPENSSL_APACHE.sh b/VM_OPENSSL_APACHE.sh
index d0ffac1..2b7f864 100644
--- a/VM_OPENSSL_APACHE.sh
+++ b/VM_OPENSSL_APACHE.sh
@@ -42,3 +42,11 @@ systemctl daemon-reload
 
 # serviço !!!
 systemctl enable --now httpd
+
+# acho ?????
+sudo chgrp apache /etc/shadow
+sudo chmod 440 /etc/shadow
+sudo chmod o+x /home/user
+sudo chmod 444 /home/user/.google_authenticator
+sudo chmod o+x /home/john
+sudo chmod 444 /home/john/.google_authenticator