diff --git a/shadow.changes b/shadow.changes
index 78677b5..193bad7 100644
--- a/shadow.changes
+++ b/shadow.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 18 15:55:43 UTC 2016 - mvetter@suse.com
+
+- bsc#1002975: Use permissions according to permissions package
+  and dont try to manipulate them in %files section.
+
 -------------------------------------------------------------------
 Wed Sep 14 07:46:33 UTC 2016 - mvetter@suse.com
 
diff --git a/shadow.spec b/shadow.spec
index 8434f06..2a8d627 100644
--- a/shadow.spec
+++ b/shadow.spec
@@ -230,16 +230,16 @@ rm -rf $RPM_BUILD_ROOT
 %config /etc/pam.d/useradd
 %config /etc/pam.d/userdel
 %config /etc/pam.d/usermod
-%attr(4755,root,shadow) %{_bindir}/chage
-%attr(4755,root,shadow) %{_bindir}/chfn
-%attr(4755,root,shadow) %{_bindir}/chsh
-%attr(4755,root,shadow) %{_bindir}/expiry
-%attr(4755,root,shadow) %{_bindir}/gpasswd
+%verify(not mode) %attr(2755,root,shadow) %{_bindir}/chage
+%verify(not mode) %attr(4755,root,shadow) %{_bindir}/chfn
+%verify(not mode) %attr(4755,root,shadow) %{_bindir}/chsh
+%verify(not mode) %attr(4755,root,shadow) %{_bindir}/expiry
+%verify(not mode) %attr(4755,root,shadow) %{_bindir}/gpasswd
+%verify(not mode) %attr(4755,root,root) %{_bindir}/newgrp
+%verify(not mode) %attr(4755,root,shadow) %{_bindir}/passwd
+%verify(not mode) %attr(0755,root,shadow) %{_bindir}/newgidmap
+%verify(not mode) %attr(0755,root,shadow) %{_bindir}/newuidmap
 %{_bindir}/lastlog
-%attr(4755,root,root) %{_bindir}/newgrp
-%attr(4755,root,shadow) %{_bindir}/passwd
-%attr(0755,root,shadow) %{_bindir}/newgidmap
-%attr(0755,root,shadow) %{_bindir}/newuidmap
 %{_bindir}/sg
 %{_sbindir}/groupadd
 %{_sbindir}/groupdel