diff --git a/rpm-suse_macros b/rpm-suse_macros
index eea1306..ab14b81 100644
--- a/rpm-suse_macros
+++ b/rpm-suse_macros
@@ -80,6 +80,7 @@
 
 %is_plus %(if test -f /.buildenv ; then source /.buildenv ; if [[ "$BUILD_BASENAME" == *+kde ]] ; then echo 1 ; else echo 0 ; fi ; else echo 0 ; fi)
 
+# deprecated, use %set_permissions instead
 %run_permissions() \
 	if test "$YAST_IS_RUNNING" != "instsys" ; then \
 	    if test -x /sbin/SuSEconfig -a -f /sbin/conf.d/SuSEconfig.permissions ; then \
@@ -118,9 +119,14 @@
   fi \
   %nil
 
+%set_permissions(f:) \
+  if [ -x /usr/bin/chkstat ]; then \
+    /usr/bin/chkstat -n --set --system %{**} \
+  fi \
+  %nil
 
 %verify_permissions(e:f:) \
-   /usr/bin/chkstat -n --system %{**} 1>&2 \
+   /usr/bin/chkstat -n --warn --system %{**} 1>&2 \
    %nil
 
 # %{suse_update_config [-fcl] [dirs...]}
diff --git a/rpm.changes b/rpm.changes
index 77c0ee2..335c374 100644
--- a/rpm.changes
+++ b/rpm.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Nov 16 15:25:45 UTC 2010 - lnussel@suse.de
+
+- fix %verify_permissions to actually only warn
+- introduce %set_permissions to replace %run_permissions in the future
+
 -------------------------------------------------------------------
 Tue Nov  9 15:07:52 UTC 2010 - lnussel@suse.de