diff --git a/tasks/install.yml b/tasks/install.yml
index 2bd4358e2ff993f1dd84862aebde3416b1c2b7b8..6df0c6fffb837fd8205d952c296fe8646220dc11 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -259,6 +259,19 @@
   when: drupal.install_extra_dirs|default(true)
   ignore_errors: yes
 
+- name: Make custom directories readonly
+  file:
+    path: '{{ webRoot }}/{{ item }}'
+    mode: ug-w
+    recurse: yes
+    follow: no
+  with_items: '{{ drupal.readonly|default([]) }}'
+  tags:
+    - deploy
+    - SetPermissions
+  when: drupal.install_extra_dirs|default(true)
+  ignore_errors: yes
+
 - name: Setup Crontabs for each domain
   cron:
     name: Drupal {{ item.1.name }}