diff --git a/units/systemd-journalctl-metrics.socket b/units/systemd-journalctl-metrics.socket
index 93e126d6ba..64f2a8bfdb 100644
--- a/units/systemd-journalctl-metrics.socket
+++ b/units/systemd-journalctl-metrics.socket
@@ -19,10 +19,13 @@ ListenStream=/run/systemd/report/io.systemd.Journal
 FileDescriptorName=varlink
 # Same permissions as systemd-journalctl.socket for io.systemd.JournalAccess
 SocketGroup=systemd-journal
-SocketMode=0660
+SocketMode=0664
 Accept=yes
 MaxConnectionsPerSource=16
 RemoveOnStop=yes
+XAttrEntryPoint=user.varlink=entrypoint
+XAttrListen=user.varlink=listen
+XAttrAccept=user.varlink=server
 
 [Install]
 WantedBy=sockets.target
diff --git a/units/systemd-report-sign-tsm.socket b/units/systemd-report-sign-tsm.socket
index 5817075fa7..b5048d72e5 100644
--- a/units/systemd-report-sign-tsm.socket
+++ b/units/systemd-report-sign-tsm.socket
@@ -18,7 +18,7 @@ ConditionSecurity=cvm
 [Socket]
 ListenStream=/run/systemd/report.sign/tsm
 FileDescriptorName=varlink
-SocketMode=0600
+SocketMode=0644
 Accept=yes
 MaxConnectionsPerSource=16
 RemoveOnStop=yes
diff --git a/units/systemd-report.socket b/units/systemd-report.socket
index 9a569a7834..e2339ff595 100644
--- a/units/systemd-report.socket
+++ b/units/systemd-report.socket
@@ -15,10 +15,13 @@ Before=sockets.target
 [Socket]
 ListenStream=/run/systemd/io.systemd.Report
 FileDescriptorName=varlink
-SocketMode=0600
+SocketMode=0644
 Accept=yes
 MaxConnectionsPerSource=16
 RemoveOnStop=yes
+XAttrEntryPoint=user.varlink=entrypoint
+XAttrListen=user.varlink=listen
+XAttrAccept=user.varlink=server
 
 [Install]
 WantedBy=sockets.target