diff --git a/kea.changes b/kea.changes
index c34de8c..193baed 100644
--- a/kea.changes
+++ b/kea.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Jul  7 14:40:57 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
+
+- Use meson install_umask to set binaries and libraries
+  permissions.
+
 -------------------------------------------------------------------
 Tue Jul  1 09:28:14 UTC 2025 - Jorik Cronenberg <jorik.cronenberg@suse.com>
 
diff --git a/kea.spec b/kea.spec
index 74255a8..c518f04 100644
--- a/kea.spec
+++ b/kea.spec
@@ -371,7 +371,7 @@ Development files for the Kea DHCP server
 export FREERADIUS_INCLUDE="%_includedir/freeradius"
 export FREERADIUS_LIB=""
 export FREERADIUS_DICTIONARY=""
-%meson -D netconf=disabled
+%meson --install-umask 022 -D netconf=disabled
 %meson_build
 %meson_build doc
 
@@ -394,10 +394,6 @@ mkdir -p "$b%_localstatedir/log/kea"
 rm -Rf "%buildroot/%python3_sitelib/kea/__pycache__"
 %fdupes %{buildroot}/%{_datadir}/doc/kea
 
-# Fix permissions so keadhcp user can run executables and libraries
-chmod 755 %{buildroot}/%{_libdir}/*.so*
-chmod 755 %{buildroot}/%{_sbindir}/kea*
-
 %pre -f random.pre
 %service_add_pre kea-dhcp4.service kea-dhcp6.service kea-dhcp-ddns.service kea-ctrl-agent.service