diff --git a/freeradius-server.changes b/freeradius-server.changes
index fce65b3..6426328 100644
--- a/freeradius-server.changes
+++ b/freeradius-server.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Sep 19 11:18:53 UTC 2017 - adam.majer@suse.de
+
+- Fix permissions of radiusd.service (bnc#1053654)
+
 -------------------------------------------------------------------
 Fri Aug 25 11:32:56 UTC 2017 - varkoly@suse.com
 
diff --git a/freeradius-server.spec b/freeradius-server.spec
index 1e2544e..f8d8664 100644
--- a/freeradius-server.spec
+++ b/freeradius-server.spec
@@ -300,7 +300,7 @@ install -m 644 suse/radiusd-logrotate %{buildroot}%{_sysconfdir}/logrotate.d/rad
 %if %{with systemd}
 mkdir -p %{buildroot}%{_tmpfilesdir}
 install -m 0644 %{SOURCE2} %{buildroot}%{_tmpfilesdir}/%{unitname}.conf
-install -D -m 755 %{SOURCE1} %{buildroot}%{_unitdir}/%{unitname}.service
+install -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{unitname}.service
 # name the rc script according to the systemd unit
 ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcradiusd
 %else