diff --git a/tasks/section_4/cis_4.2.3.yml b/tasks/section_4/cis_4.2.3.yml
index 867b253..bebd40f 100644
--- a/tasks/section_4/cis_4.2.3.yml
+++ b/tasks/section_4/cis_4.2.3.yml
@@ -13,7 +13,7 @@
       - name: "4.2.3 | PATCH | Ensure permissions on all logfiles are configured | change permissions"
         ansible.builtin.file:
             path: "{{ item.path }}"
-            mode: "{% if item.mode != '0600' %}0640{% endif %}"
+            mode: "{{ '0640' if item.mode != '0600' else '0600' }}"
         loop: "{{ logfiles.files }}"
         loop_control:
             label: "{{ item.path }}"