diff --git a/texlive-filesystem.changes b/texlive-filesystem.changes
index afba604..8882b46 100644
--- a/texlive-filesystem.changes
+++ b/texlive-filesystem.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Thu May 27 08:05:50 UTC 2021 - Matthias Gerstner <matthias.gerstner@suse.com>
+
+- remove 'public' setgid binary from permissions.d files. This entry is
+  conflicting with the global permissions profiles from the permissions
+  package. E.g. when we set the 'paranoid' profile then the public binary is
+  supposed to end up without setgid-bit, which it does not currently.
+
 -------------------------------------------------------------------
 Mon Apr 26 15:36:21 UTC 2021 - Dr. Werner Fink <werner@suse.de>
 
diff --git a/texlive-filesystem.spec b/texlive-filesystem.spec
index 57a913f..991ebdd 100644
--- a/texlive-filesystem.spec
+++ b/texlive-filesystem.spec
@@ -177,8 +177,8 @@ The basic file system layout for TeX Live installation.
 %package -n texlive-scheme-basic
 Version:        %{texlive_version}.%{texlive_noarch}.svn54191
 Release:        0
-License:        LPPL-1.0
 Summary:        Basic scheme (plain and latex)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-collection-basic >= %{texlive_version}
@@ -196,8 +196,8 @@ corresponds to collection-basic and collection-latex.
 %package -n texlive-scheme-context
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        ConTeXt scheme
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-Asana-Math >= %{texlive_version}
@@ -251,8 +251,8 @@ This is the TeX Live scheme for installing ConTeXt.
 %package -n texlive-scheme-full
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Full scheme (everything)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-collection-basic >= %{texlive_version}
@@ -342,8 +342,8 @@ available.
 %package -n texlive-scheme-gust
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        GUST TeX Live scheme
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-Type1fonts >= %{texlive_version}
@@ -420,8 +420,8 @@ documents in PostScript or PDF.
 %package -n texlive-scheme-infraonly
 Version:        %{texlive_version}.%{texlive_noarch}.svn54191
 Release:        0
-License:        LPPL-1.0
 Summary:        Infrastructure-only scheme (no TeX at all)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-hyphen-base >= %{texlive_version}
@@ -443,8 +443,8 @@ separately afterwards, with tlmgr install.
 %package -n texlive-scheme-medium
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Medium scheme (small + more packages and languages)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-collection-basic >= %{texlive_version}
@@ -499,8 +499,8 @@ languages.
 %package -n texlive-scheme-minimal
 Version:        %{texlive_version}.%{texlive_noarch}.svn54191
 Release:        0
-License:        LPPL-1.0
 Summary:        Minimal scheme (plain only)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-collection-basic >= %{texlive_version}
@@ -516,8 +516,8 @@ corresponds exactly to collection-basic.
 %package -n texlive-scheme-small
 Version:        %{texlive_version}.%{texlive_noarch}.svn54191
 Release:        0
-License:        LPPL-1.0
 Summary:        Small scheme (basic + xetex, metapost, a few languages)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-basque >= %{texlive_version}
@@ -626,8 +626,8 @@ hyphenations, and some recommended packages to scheme-basic.
 %package -n texlive-scheme-tetex
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        TeTeX scheme (more than medium, but nowhere near full)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-SIunits >= %{texlive_version}
@@ -758,8 +758,8 @@ that was maintained by Thomas Esser.
 %package -n texlive-collection-basic
 Version:        %{texlive_version}.%{texlive_noarch}.svn56569
 Release:        0
-License:        LPPL-1.0
 Summary:        Essential programs and files
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive <= %{texlive_previous}
@@ -851,8 +851,8 @@ common drivers; no LaTeX.
 %package -n texlive-collection-bibtexextra
 Version:        %{texlive_version}.%{texlive_noarch}.svn58437
 Release:        0
-License:        LPPL-1.0
 Summary:        BibTeX additional styles
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-aaai-named >= %{texlive_version}
@@ -1170,8 +1170,8 @@ including BibLaTeX.
 %package -n texlive-collection-binextra
 Version:        %{texlive_version}.%{texlive_noarch}.svn56352
 Release:        0
-License:        LPPL-1.0
 Summary:        TeX auxiliary programs
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Obsoletes:      tetex-bin <= %{texlive_previous}
@@ -1379,8 +1379,8 @@ programming, patgen, and plenty more.
 %package -n texlive-collection-context
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        ConTeXt and packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-context <= %{texlive_previous}
@@ -1469,8 +1469,8 @@ Also includes third-party ConTeXt packages.
 %package -n texlive-collection-fontsextra
 Version:        %{texlive_version}.%{texlive_noarch}.svn58253
 Release:        0
-License:        LPPL-1.0
 Summary:        Additional fonts
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Fonts
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-fonts-extra <= %{texlive_previous}
@@ -2145,8 +2145,8 @@ The collection-fontsextra package
 %package -n texlive-collection-fontsrecommended
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Recommended fonts
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Fonts
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-avantgar >= %{texlive_version}
@@ -2227,8 +2227,8 @@ Computer Modern, in outline form.
 %package -n texlive-collection-fontutils
 Version:        %{texlive_version}.%{texlive_noarch}.svn57089
 Release:        0
-License:        LPPL-1.0
 Summary:        Graphics and font utilities
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       psutils
@@ -2275,8 +2275,8 @@ PostScript and other image formats.
 %package -n texlive-collection-formatsextra
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Additional formats
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-aleph >= %{texlive_version}
@@ -2331,8 +2331,8 @@ formats and packages.
 %package -n texlive-collection-games
 Version:        %{texlive_version}.%{texlive_noarch}.svn56623
 Release:        0
-License:        LPPL-1.0
 Summary:        Games typesetting
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-bartel-chess-fonts >= %{texlive_version}
@@ -2419,8 +2419,8 @@ Setups for typesetting various games, including chess.
 %package -n texlive-collection-humanities
 Version:        %{texlive_version}.%{texlive_noarch}.svn56575
 Release:        0
-License:        LPPL-1.0
 Summary:        Humanities packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-adtrees >= %{texlive_version}
@@ -2538,8 +2538,8 @@ etc.
 %package -n texlive-collection-langarabic
 Version:        %{texlive_version}.%{texlive_noarch}.svn56215
 Release:        0
-License:        LPPL-1.0
 Summary:        Arabic
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-arab <= %{texlive_previous}
@@ -2607,8 +2607,8 @@ Support for Arabic and Persian.
 %package -n texlive-collection-langchinese
 Version:        %{texlive_version}.%{texlive_noarch}.svn56196
 Release:        0
-License:        LPPL-1.0
 Summary:        Chinese
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-arphic >= %{texlive_version}
@@ -2681,8 +2681,8 @@ Support for Chinese; additional packages in collection-langcjk.
 %package -n texlive-collection-langcjk
 Version:        %{texlive_version}.%{texlive_noarch}.svn54191
 Release:        0
-License:        LPPL-1.0
 Summary:        Chinese/Japanese/Korean (base)
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-cjk <= %{texlive_previous}
@@ -2729,8 +2729,8 @@ for CJK are in their individual language collections.
 %package -n texlive-collection-langcyrillic
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Cyrillic
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-belarusian >= %{texlive_version}
@@ -2836,8 +2836,8 @@ Ukrainian), even if Latin alphabets may also be used.
 %package -n texlive-collection-langczechslovak
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Czech/Slovak
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-czech >= %{texlive_version}
@@ -2880,8 +2880,8 @@ Support for Czech/Slovak.
 %package -n texlive-collection-langenglish
 Version:        %{texlive_version}.%{texlive_noarch}.svn58290
 Release:        0
-License:        LPPL-1.0
 Summary:        US and UK English
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-MemoirChapStyles >= %{texlive_version}
@@ -3024,8 +3024,8 @@ Support for, and documentation in, English.
 %package -n texlive-collection-langeuropean
 Version:        %{texlive_version}.%{texlive_noarch}.svn58626
 Release:        0
-License:        LPPL-1.0
 Summary:        Other European languages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-armtex >= %{texlive_version}
@@ -3172,8 +3172,8 @@ simply on the size of the support.
 %package -n texlive-collection-langfrench
 Version:        %{texlive_version}.%{texlive_noarch}.svn57491
 Release:        0
-License:        LPPL-1.0
 Summary:        French
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-aeguill >= %{texlive_version}
@@ -3264,8 +3264,8 @@ Support for French and Basque.
 %package -n texlive-collection-langgerman
 Version:        %{texlive_version}.%{texlive_noarch}.svn55706
 Release:        0
-License:        LPPL-1.0
 Summary:        German
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-apalike-german >= %{texlive_version}
@@ -3368,8 +3368,8 @@ Support for German.
 %package -n texlive-collection-langgreek
 Version:        %{texlive_version}.%{texlive_noarch}.svn54139
 Release:        0
-License:        LPPL-1.0
 Summary:        Greek
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-greek >= %{texlive_version}
@@ -3428,8 +3428,8 @@ Support for Greek.
 %package -n texlive-collection-langitalian
 Version:        %{texlive_version}.%{texlive_noarch}.svn55129
 Release:        0
-License:        LPPL-1.0
 Summary:        Italian
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-amsldoc-it >= %{texlive_version}
@@ -3478,8 +3478,8 @@ Support for Italian.
 %package -n texlive-collection-langjapanese
 Version:        %{texlive_version}.%{texlive_noarch}.svn58754
 Release:        0
-License:        LPPL-1.0
 Summary:        Japanese
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-ascmac >= %{texlive_version}
@@ -3605,8 +3605,8 @@ collection-langcjk.
 %package -n texlive-collection-langkorean
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Korean
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-baekmuk >= %{texlive_version}
@@ -3643,8 +3643,8 @@ Support for Korean; additional packages in collection-langcjk.
 %package -n texlive-collection-langother
 Version:        %{texlive_version}.%{texlive_noarch}.svn57757
 Release:        0
-License:        LPPL-1.0
 Summary:        Other languages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-aalok >= %{texlive_version}
@@ -3775,8 +3775,8 @@ collections reasonable.
 %package -n texlive-collection-langpolish
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Polish
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-polish >= %{texlive_version}
@@ -3825,8 +3825,8 @@ Support for Polish.
 %package -n texlive-collection-langportuguese
 Version:        %{texlive_version}.%{texlive_noarch}.svn54074
 Release:        0
-License:        LPPL-1.0
 Summary:        Portuguese
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-portuges >= %{texlive_version}
@@ -3861,8 +3861,8 @@ Support for Portuguese.
 %package -n texlive-collection-langspanish
 Version:        %{texlive_version}.%{texlive_noarch}.svn54141
 Release:        0
-License:        LPPL-1.0
 Summary:        Spanish
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-babel-catalan >= %{texlive_version}
@@ -3899,8 +3899,8 @@ Support for Spanish.
 %package -n texlive-collection-latex
 Version:        %{texlive_version}.%{texlive_noarch}.svn57048
 Release:        0
-License:        LPPL-1.0
 Summary:        LaTeX fundamental packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-latex <= %{texlive_previous}
@@ -4029,8 +4029,8 @@ very widely used and strongly recommended in practice.
 %package -n texlive-collection-latexextra
 Version:        %{texlive_version}.%{texlive_noarch}.svn58593
 Release:        0
-License:        LPPL-1.0
 Summary:        LaTeX additional packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-2up >= %{texlive_version}
@@ -6759,8 +6759,8 @@ A very large collection of add-on packages for LaTeX.
 %package -n texlive-collection-latexrecommended
 Version:        %{texlive_version}.%{texlive_noarch}.svn57862
 Release:        0
-License:        LPPL-1.0
 Summary:        LaTeX recommended packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-anysize >= %{texlive_version}
@@ -6917,8 +6917,8 @@ latex-dev, etc.
 %package -n texlive-collection-luatex
 Version:        %{texlive_version}.%{texlive_noarch}.svn58124
 Release:        0
-License:        LPPL-1.0
 Summary:        LuaTeX packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-addliga >= %{texlive_version}
@@ -7049,8 +7049,8 @@ http://luatex.org/
 %package -n texlive-collection-mathscience
 Version:        %{texlive_version}.%{texlive_noarch}.svn57759
 Release:        0
-License:        LPPL-1.0
 Summary:        Mathematics, natural sciences, computer science packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-12many >= %{texlive_version}
@@ -7495,8 +7495,8 @@ The collection-mathscience package
 %package -n texlive-collection-metapost
 Version:        %{texlive_version}.%{texlive_noarch}.svn50293
 Release:        0
-License:        LPPL-1.0
 Summary:        MetaPost and Metafont packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-metapost <= %{texlive_previous}
@@ -7599,8 +7599,8 @@ The collection-metapost package
 %package -n texlive-collection-music
 Version:        %{texlive_version}.%{texlive_noarch}.svn57878
 Release:        0
-License:        LPPL-1.0
 Summary:        Music packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-musictex <= %{texlive_previous}
@@ -7681,8 +7681,8 @@ Music-related fonts and packages.
 %package -n texlive-collection-pictures
 Version:        %{texlive_version}.%{texlive_noarch}.svn58759
 Release:        0
-License:        LPPL-1.0
 Summary:        Graphics, pictures, diagrams
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-adigraph >= %{texlive_version}
@@ -8115,8 +8115,8 @@ separate.
 %package -n texlive-collection-plaingeneric
 Version:        %{texlive_version}.%{texlive_noarch}.svn56496
 Release:        0
-License:        LPPL-1.0
 Summary:        Plain (La)TeX packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-abbr >= %{texlive_version}
@@ -8340,8 +8340,8 @@ LaTeX, and occasionally other formats.
 %package -n texlive-collection-pstricks
 Version:        %{texlive_version}.%{texlive_noarch}.svn54455
 Release:        0
-License:        LPPL-1.0
 Summary:        PSTricks
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-auto-pst-pdf >= %{texlive_version}
@@ -8577,8 +8577,8 @@ PSTricks core and all add-on packages.
 %package -n texlive-collection-publishers
 Version:        %{texlive_version}.%{texlive_noarch}.svn57312
 Release:        0
-License:        LPPL-1.0
 Summary:        Publisher styles, theses, etcetera
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Base
 URL:            http://www.tug.org/texlive/
 Requires:       texlive-IEEEconf >= %{texlive_version}
@@ -9069,8 +9069,8 @@ The collection-publishers package
 %package -n texlive-collection-xetex
 Version:        %{texlive_version}.%{texlive_noarch}.svn58543
 Release:        0
-License:        LPPL-1.0
 Summary:        XeTeX and packages
+License:        LPPL-1.0
 Group:          Productivity/Publishing/TeX/Frontends
 URL:            http://www.tug.org/texlive/
 Obsoletes:      texlive-xetex <= %{texlive_previous}
@@ -21145,7 +21145,6 @@ popd
     # the permission files, any change is also required within do.mklists
     mkdir -p %{buildroot}%{_sysconfdir}/permissions.d
     (cat > %{buildroot}%{_sysconfdir}/permissions.d/texlive.texlive) <<-EOF
-	%{_libexecdir}/mktex/public	root:%{texgrp}	2755
 	%{_texmfconfdir}/ls-R		root:%{texgrp}	0664
 	%{_fontcache}/ls-R	   %{texusr}:%{texgrp}	0664
 	%{_texmfvardir}/ls-R		root:%{texgrp}	0664
@@ -21165,7 +21164,6 @@ popd
 	%{_fontcache}/tfm/	   %{texusr}:%{texgrp}	3775
 	EOF
     (cat > %{buildroot}%{_sysconfdir}/permissions.d/texlive) <<-EOF
-	%{_libexecdir}/mktex/public	root:%{texgrp}	2755
 	%{_texmfconfdir}/ls-R		root:%{texgrp}	0664
 	%{_fontcache}/ls-R	   %{texusr}:%{texgrp}	0664
 	%{_texmfvardir}/ls-R		root:%{texgrp}	0664