diff --git a/ca-certificates.changes b/ca-certificates.changes
index 6ce754b..8bb4e35 100644
--- a/ca-certificates.changes
+++ b/ca-certificates.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Jun 23 15:24:13 UTC 2014 - lnussel@suse.de
+
+- fix directory permissions for real this time (bnc#871639)
+
 -------------------------------------------------------------------
 Wed Jun  4 11:10:24 UTC 2014 - lnussel@suse.de
 
diff --git a/ca-certificates.spec b/ca-certificates.spec
index 4dcbb40..ac67844 100644
--- a/ca-certificates.spec
+++ b/ca-certificates.spec
@@ -67,13 +67,13 @@ Utilities for system wide CA certificate installation
 rm -f certbundle.run
 %endif
 %make_install
-install -d m 755 %{buildroot}%{trustdir_cfg}/{anchors,blacklist}
-install -d m 755 %{buildroot}%{trustdir_static}/{anchors,blacklist}
-install -d m 755 %{buildroot}%{ssletcdir}
-install -d m 755 %{buildroot}/etc/ca-certificates/update.d
-install -d m 755 %{buildroot}%{_prefix}/lib/ca-certificates/update.d
-install -d m 555 %{buildroot}/var/lib/ca-certificates/pem
-install -d m 555 %{buildroot}/var/lib/ca-certificates/openssl
+install -d -m 755 %{buildroot}%{trustdir_cfg}/{anchors,blacklist}
+install -d -m 755 %{buildroot}%{trustdir_static}/{anchors,blacklist}
+install -d -m 755 %{buildroot}%{ssletcdir}
+install -d -m 755 %{buildroot}/etc/ca-certificates/update.d
+install -d -m 755 %{buildroot}%{_prefix}/lib/ca-certificates/update.d
+install -d -m 555 %{buildroot}/var/lib/ca-certificates/pem
+install -d -m 555 %{buildroot}/var/lib/ca-certificates/openssl
 ln -s /var/lib/ca-certificates/pem %{buildroot}%{sslcerts}
 %if %{with cabundle}
 install -D -m 644 /dev/null %{buildroot}/%{cabundle}