diff --git a/gvfs.changes b/gvfs.changes
index bbb9f9c..7ca405a 100644
--- a/gvfs.changes
+++ b/gvfs.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Oct 31 14:31:25 UTC 2017 - tbechtold@suse.com
+
+- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
+  servers default to a mode where they do not allow non-system
+  ports from connecting. These servers require to use the
+  "insecure" export option in /etc/exports in order to allow libnfs
+  clients to be able to connect. Allow the usage of privileged
+  ports for the gvfsd-nfs executable to not require the "insecure"
+  option on the server (bsc#1065864).
+
 -------------------------------------------------------------------
 Mon Oct  2 18:26:16 UTC 2017 - zaitor@opensuse.org
 
diff --git a/gvfs.spec b/gvfs.spec
index a4f0429..1826f9b 100644
--- a/gvfs.spec
+++ b/gvfs.spec
@@ -322,7 +322,8 @@ find %{buildroot}%{_libdir} -type f -name '*.la' -delete -print
 %{_libexecdir}/%{name}/gvfsd-network
 %{_datadir}/%{name}/mounts/network.mount
 %if 0%{?is_opensuse}
-%{_libexecdir}/%{name}/gvfsd-nfs
+# allow priv ports for mounting nfs . Otherwise the nfs-service requires insecure
+%caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs
 %{_datadir}/%{name}/mounts/nfs.mount
 %endif
 %if !0%{?is_opensuse}