diff --git a/shadow.changes b/shadow.changes
index fb0b63f..b11e642 100644
--- a/shadow.changes
+++ b/shadow.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Jan 20 10:36:20 UTC 2020 - Michael Vetter <mvetter@suse.com>
+
+- Set 0755 for chpasswd, groupadd, groupdel, groupmod, newusers,
+  useradd, userdel, usermod explicitly.
+
 -------------------------------------------------------------------
 Thu Jan 16 12:54:39 UTC 2020 - Michael Vetter <mvetter@suse.com>
 
diff --git a/shadow.spec b/shadow.spec
index 9bc2c10..5b51f93 100644
--- a/shadow.spec
+++ b/shadow.spec
@@ -312,18 +312,18 @@ done
 %verify(not mode) %attr(4755,root,shadow) %{_bindir}/newuidmap
 %{_bindir}/lastlog
 %{_bindir}/sg
-%{_sbindir}/groupadd
-%{_sbindir}/groupdel
-%{_sbindir}/groupmod
+%attr(0755,root,root) %{_sbindir}/groupadd
+%attr(0755,root,root) %{_sbindir}/groupdel
+%attr(0755,root,root) %{_sbindir}/groupmod
 %{_sbindir}/grpck
 %{_sbindir}/pwck
-%{_sbindir}/useradd
-%{_sbindir}/userdel
-%{_sbindir}/usermod
+%attr(0755,root,root) %{_sbindir}/useradd
+%attr(0755,root,root) %{_sbindir}/userdel
+%attr(0755,root,root) %{_sbindir}/usermod
 %{_sbindir}/pwconv
 %{_sbindir}/pwunconv
-%{_sbindir}/chpasswd
-%{_sbindir}/newusers
+%attr(0755,root,root) %{_sbindir}/chpasswd
+%attr(0755,root,root) %{_sbindir}/newusers
 %{_sbindir}/vipw
 %{_sbindir}/vigr
 %verify(not md5 size mtime) %config(noreplace) %{_sbindir}/useradd.local