diff --git a/easy-rsa.spec b/easy-rsa.spec
index fdce6f3..0e67f88 100644
--- a/easy-rsa.spec
+++ b/easy-rsa.spec
@@ -52,6 +52,7 @@ Patch10:        https://github.com/OpenVPN/easy-rsa/commit/a138c0d.patch
 Patch11:        https://github.com/OpenVPN/easy-rsa/commit/83a1a21.patch
 # openSUSE specific
 Patch100:       easy-rsa-packaging.patch
+BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildArch:      noarch
 
 %description
@@ -73,7 +74,7 @@ certificates, including sub-CAs and certificate revokation lists (CRL).
 %patch9 -p1
 %patch10 -p1
 %patch11 -p1
-%patch100
+%patch100 -p0
 
 # Add this for SLE11, patch tool can't rename file.
 # Next release we should publish .md documentation.
@@ -93,6 +94,7 @@ install -Dm0644 easyrsa3/x509-types/* %{buildroot}/%{_sysconfdir}/easy-rsa/x509-
 install -Dm0755 easyrsa3/easyrsa %{buildroot}/%{_bindir}/easyrsa
 
 %files
+%defattr(-,root,root)
 %doc KNOWN_ISSUES README.md README.quickstart.md COPYING.md
 %doc Licensing/*
 %doc doc/*