Find all files in the /etc directory with either an .xml or .conf extension, then remove write permission for the group on those files.
find /etc -type f \( -name "*.xml" -o -name "*.conf" \) -print0 | xargs -0 chmod g-w