diff --git a/freeradius-server.changes b/freeradius-server.changes
index c400dd7..672f69b 100644
--- a/freeradius-server.changes
+++ b/freeradius-server.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Sat Feb 17 18:11:19 UTC 2024 - Christian Boltz <suse-beta@cboltz.de>
+
+- fix directory permissions for
+  /etc/raddb/mods-config/sql/moonshot-targeted-ids/*sql*
+  (boo#1220025, accidentally discovered via boo#1220024)
+
 -------------------------------------------------------------------
 Tue Feb  6 08:21:21 UTC 2024 - Marcus Meissner <meissner@suse.com>
 
diff --git a/freeradius-server.spec b/freeradius-server.spec
index f009fb5..0cc422d 100644
--- a/freeradius-server.spec
+++ b/freeradius-server.spec
@@ -403,7 +403,8 @@ done
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/files
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/files/*
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/preprocess
-%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/*
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/*sql*
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/*sql*/*
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/realm
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/realm/freeradius-naptr-to-home-server.sh
 %dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/moonshot-targeted-ids