diff --git a/java-1_8_0-openjdk.spec b/java-1_8_0-openjdk.spec
index f507d33..8d5eda2 100644
--- a/java-1_8_0-openjdk.spec
+++ b/java-1_8_0-openjdk.spec
@@ -827,20 +827,20 @@ NOT_HEADLESS=\
 #filter %{name}.files from %{name}.files.all to %{name}.files-headless
 ALL=`cat %{name}.files.all`
 for file in $ALL ; do
-    INLCUDE="NO" ;
-    for blacklist in $NOT_HEADLESS ; do
+  INLCUDE="NO" ;
+  for blacklist in $NOT_HEADLESS ; do
     # we can not match normally, because rpmbuild will evaluate !0 result as script failure
     q=`expr match "$file" "$blacklist"` || :
     l=`expr length "$blacklist"` || :
     if [ $q -eq $l ]; then
-        INLCUDE="YES" ;
+       INLCUDE="YES" ;
     fi;
-done
-if [ "x$INLCUDE" = "xNO" ]; then
+  done
+  if [ "x$INLCUDE" = "xNO" ]; then
     echo "$file" >> %{name}.files-headless
-else
+  else
     echo "$file" >> %{name}.files
-fi
+  fi
 done
 # Find demo directories.
 find %{buildroot}%{_jvmdir}/%{sdkdir}/demo \
@@ -1153,6 +1153,7 @@ fi
 %config(noreplace) %{_jvmdir}/%{jredir}/lib/security/java.policy
 %config(noreplace) %{_jvmdir}/%{jredir}/lib/security/java.security
 %config(noreplace) %{_jvmdir}/%{jredir}/lib/security/blacklisted.certs
+%config(noreplace) %{_jvmdir}/%{jredir}/lib/security/nss.cfg
 %{_mandir}/man1/java-%{sdklnk}.1*
 %{_mandir}/man1/jjs-%{sdklnk}.1*
 %{_mandir}/man1/keytool-%{sdklnk}.1*
@@ -1164,7 +1165,6 @@ fi
 %{_mandir}/man1/servertool-%{sdklnk}.1*
 %{_mandir}/man1/tnameserv-%{sdklnk}.1*
 %{_mandir}/man1/unpack200-%{sdklnk}.1*
-%{_jvmdir}/%{jredir}/lib/security/nss.cfg
 %{_jvmdir}/%{jredir}/lib/security/US_export_policy.jar
 %{_jvmdir}/%{jredir}/lib/security/local_policy.jar