diff --git a/sanlock.changes b/sanlock.changes
index fb76d2d..0857b60 100644
--- a/sanlock.changes
+++ b/sanlock.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Apr  3 15:43:17 UTC 2017 - jfehlig@suse.com
+
+- spec: fix permisssions on config files
+
 -------------------------------------------------------------------
 Mon Apr  3 15:31:43 UTC 2017 - jfehlig@suse.com
 
diff --git a/sanlock.spec b/sanlock.spec
index f3c0003..4cf584c 100644
--- a/sanlock.spec
+++ b/sanlock.spec
@@ -181,9 +181,9 @@ make -C reset \
         DESTDIR=$RPM_BUILD_ROOT
 %endif
 
-install -D -m 755 src/sanlock.conf $RPM_BUILD_ROOT/%{_sysconfdir}/sanlock/sanlock.conf
-install -D -m 755 %SOURCE2 $RPM_BUILD_ROOT/%{_localstatedir}/adm/fillup-templates/sysconfig.sanlock
-install -D -m 755 %SOURCE4 $RPM_BUILD_ROOT/%{_localstatedir}/adm/fillup-templates/sysconfig.wdmd
+install -D -m 644 src/sanlock.conf $RPM_BUILD_ROOT/%{_sysconfdir}/sanlock/sanlock.conf
+install -D -m 644 %SOURCE2 $RPM_BUILD_ROOT/%{_localstatedir}/adm/fillup-templates/sysconfig.sanlock
+install -D -m 644 %SOURCE4 $RPM_BUILD_ROOT/%{_localstatedir}/adm/fillup-templates/sysconfig.wdmd
 
 %if %{with_systemd}
 install -D -m 644 init.d/sanlock.service $RPM_BUILD_ROOT/%{_unitdir}/sanlock.service