diff --git a/scripts/ensure-perms b/scripts/ensure-perms
new file mode 100755
index 000000000..321012d1e
--- /dev/null
+++ b/scripts/ensure-perms
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+# ensures perms on a newly-built distribution are good.
+# usage: sudo ensure-perms /path/to/nix
+
+nix_path=$1
+chown root:root -R $nix_path
+chown root:nixbld $nix_path/store