diff --git a/ca-certificates.changes b/ca-certificates.changes
index 6bca7c7..7529687 100644
--- a/ca-certificates.changes
+++ b/ca-certificates.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Apr  4 11:38:17 UTC 2014 - lnussel@suse.de
+
+- package correct permissions of generated  directories (bnc#871639)
+
 -------------------------------------------------------------------
 Fri Dec  6 09:16:11 UTC 2013 - lnussel@suse.de
 
diff --git a/ca-certificates.spec b/ca-certificates.spec
index 0d7fab0..c4b32b0 100644
--- a/ca-certificates.spec
+++ b/ca-certificates.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package ca-certificates
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -72,8 +72,8 @@ install -d m 755 %{buildroot}%{trustdir_static}/{anchors,blacklist}
 install -d m 755 %{buildroot}%{ssletcdir}
 install -d m 755 %{buildroot}/etc/ca-certificates/update.d
 install -d m 755 %{buildroot}%{_prefix}/lib/ca-certificates/update.d
-install -d m 755 %{buildroot}/var/lib/ca-certificates/pem
-install -d m 755 %{buildroot}/var/lib/ca-certificates/openssl
+install -d m 555 %{buildroot}/var/lib/ca-certificates/pem
+install -d m 555 %{buildroot}/var/lib/ca-certificates/openssl
 ln -s /var/lib/ca-certificates/pem %{buildroot}%{sslcerts}
 %if %{with cabundle}
 install -D -m 644 /dev/null %{buildroot}/%{cabundle}