diff --git a/openCryptoki.changes b/openCryptoki.changes
index de4706c..c577e46 100644
--- a/openCryptoki.changes
+++ b/openCryptoki.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Wed Dec 11 07:35:28 UTC 2024 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
+
+- Moved pkcshsm_mk_change from openCryptoki-devel to openCryptoki
+        (jsc#PED-10291, jsc#PED-10290)
+
+-------------------------------------------------------------------
+Tue Dec 10 08:13:46 UTC 2024 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
+
+- Amended the .spec file (jsc#PED-10291, jsc#PED-10290)
+  * Changed attributes - %attr(0640,root,%{pkcs_group}) - of files below:
+    - %{_sysconfdir}/opencryptoki/strength.conf
+    - %{_sysconfdir}/opencryptoki/p11sak_defined_attrs.conf
+
 -------------------------------------------------------------------
 Mon Nov 25 11:42:14 UTC 2024 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
 
diff --git a/openCryptoki.spec b/openCryptoki.spec
index d1cc251..0b4d4be 100644
--- a/openCryptoki.spec
+++ b/openCryptoki.spec
@@ -261,8 +261,8 @@ ln -sf %{_libdir}/opencryptoki/libopencryptoki.so %{_prefix}/lib/pkcs11/PKCS11_A
   # configuration directory
 %dir %{_sysconfdir}/opencryptoki
 %config %{_sysconfdir}/opencryptoki/opencryptoki.conf
-%config %{_sysconfdir}/opencryptoki/strength.conf
-%config %{_sysconfdir}/opencryptoki/p11sak_defined_attrs.conf
+%attr(0640,root,%{pkcs_group}) %config %{_sysconfdir}/opencryptoki/strength.conf
+%attr(0640,root,%{pkcs_group}) %config %{_sysconfdir}/opencryptoki/p11sak_defined_attrs.conf
 %ifarch s390 s390x
 %config %{_sysconfdir}/opencryptoki/ep11cpfilter.conf
 %config %{_sysconfdir}/opencryptoki/ep11tok.conf
@@ -304,13 +304,13 @@ ln -sf %{_libdir}/opencryptoki/libopencryptoki.so %{_prefix}/lib/pkcs11/PKCS11_A
 %endif
 %dir %attr(770,root,%{pkcs_group}) %{_localstatedir}/log/opencryptoki/
 %{_mandir}/man*/*
+%{_sbindir}/pkcshsm_mk_change
 
 %files devel
 %dir %{_libdir}/opencryptoki
 %dir %{_libdir}/opencryptoki/stdll
 %{_includedir}/opencryptoki
 %{_libdir}/pkgconfig/opencryptoki.pc
-%{_sbindir}/pkcshsm_mk_change
 
 %ifarch %{openCryptoki_32bit_arch}
 %files 32bit