diff --git a/haproxy.changes b/haproxy.changes
index 696acc2..580ab32 100644
--- a/haproxy.changes
+++ b/haproxy.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Mar  8 19:19:06 UTC 2018 - mrueckert@suse.de
+
+- if we lock down the permissions the home directory has to be
+  owned by haproxy (bsc#1077716)
+
 -------------------------------------------------------------------
 Sun Mar  4 08:36:21 UTC 2018 - jengelh@inai.de
 
diff --git a/haproxy.spec b/haproxy.spec
index 3415474..be94759 100644
--- a/haproxy.spec
+++ b/haproxy.spec
@@ -226,7 +226,7 @@ getent passwd %{pkg_name} >/dev/null || \
 %{_sbindir}/haproxy
 %{_sbindir}/haproxy-halog
 %{_sbindir}/rchaproxy
-%{pkg_home}
+%dir %attr(-,root,haproxy) %{pkg_home}
 %{_mandir}/man1/%{pkg_name}.1.gz
 %{vim_data_dir}/syntax/%{pkg_name}.vim
 %if %{with apparmor}