diff --git a/apache2.changes b/apache2.changes
index 78fe081..86ed56c 100644
--- a/apache2.changes
+++ b/apache2.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Sep 29 11:57:40 UTC 2014 - pgajdos@suse.com
+
+- 700 permissions for /usr/sbin/apache2-systemd-ask-pass and
+  /usr/sbin/start_apache2 [bnc#851627]
+
 -------------------------------------------------------------------
 Wed Sep 26 15:38:17 UTC 2014 - oholecek@suse.com
 
diff --git a/apache2.spec b/apache2.spec
index ff600c2..bf9d467 100644
--- a/apache2.spec
+++ b/apache2.spec
@@ -622,10 +622,10 @@ tar xjf %{SOURCE29} -C $RPM_BUILD_ROOT/%{sysconfdir}
 # init script and friends
 mkdir -p $RPM_BUILD_ROOT/etc/init.d
 install -m 744 $RPM_SOURCE_DIR/rc.%{pname} $RPM_BUILD_ROOT/etc/init.d/%{pname}
-install -m 744 $RPM_SOURCE_DIR/start_apache2 $RPM_BUILD_ROOT/usr/sbin/start_apache2
+install -m 700 $RPM_SOURCE_DIR/start_apache2 $RPM_BUILD_ROOT/usr/sbin/start_apache2
 %if 0%{?suse_version} >= 1210
 mkdir -p $RPM_BUILD_ROOT%{_unitdir}/system/
-install -m 744 $RPM_SOURCE_DIR/apache2-systemd-ask-pass $RPM_BUILD_ROOT/usr/sbin/apache2-systemd-ask-pass
+install -m 700 $RPM_SOURCE_DIR/apache2-systemd-ask-pass $RPM_BUILD_ROOT/usr/sbin/apache2-systemd-ask-pass
 install -m 644 $RPM_SOURCE_DIR/apache2.service $RPM_BUILD_ROOT%{_unitdir}/system/apache2.service
 %endif
 ln -sf ../../etc/init.d/%{pname} $RPM_BUILD_ROOT/%{_sbindir}/rc%{pname}