diff --git a/openCryptoki.changes b/openCryptoki.changes
index 8d63fd4..864c816 100644
--- a/openCryptoki.changes
+++ b/openCryptoki.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Nov 28 16:24:11 UTC 2022 - Mark Post <mpost@suse.com>
+
+- Updated spec file to set permissions on /etc/opencryptoki/strength.conf
+  to be owned by root:pkcs11 with permissions of 640. (bsc#1205566)
+
 -------------------------------------------------------------------
 Fri Sep 30 19:14:38 UTC 2022 - Mark Post <mpost@suse.com>
 
diff --git a/openCryptoki.spec b/openCryptoki.spec
index 742b6bd..ee8d659 100644
--- a/openCryptoki.spec
+++ b/openCryptoki.spec
@@ -232,7 +232,7 @@ ln -sf %{_libdir}/opencryptoki/libopencryptoki.so %{_prefix}/lib/pkcs11/PKCS11_A
   # configuration directory
 %dir %{_sysconfdir}/opencryptoki
 %config %{_sysconfdir}/opencryptoki/opencryptoki.conf
-%config %{_sysconfdir}/opencryptoki/strength.conf
+%config %attr(640,root,pkcs11) %{_sysconfdir}/opencryptoki/strength.conf
 %config %attr(640,root,pkcs11) %{_sysconfdir}/opencryptoki/p11sak_defined_attrs.conf
 %ifarch s390 s390x
 %config %{_sysconfdir}/opencryptoki/ccatok.conf