image: don't modify file permissions before rootfs generation