diff --git a/pam.changes b/pam.changes
index 14e8be7..3320689 100644
--- a/pam.changes
+++ b/pam.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Jan 24 11:27:16 CET 2007 - mc@suse.de
+
+- add %verify_permissions for /sbin/unix_chkpwd
+  [#237625] 
+
 -------------------------------------------------------------------
 Tue Jan 23 13:19:51 CET 2007 - kukuk@suse.de
 
diff --git a/pam.spec b/pam.spec
index 8a2ee15..380b657 100644
--- a/pam.spec
+++ b/pam.spec
@@ -23,7 +23,7 @@ License:        Beerware, Cardware, Shareware (not restricted), BSD License and
 Group:          System/Libraries
 Autoreqprov:    on
 Version:        0.99.7.1
-Release:        1
+Release:        2
 Summary:        A security tool that provides authentication for applications
 Obsoletes:      pam-laus
 Source:         Linux-PAM-%{version}.tar.bz2
@@ -144,9 +144,14 @@ rm -f $RPM_BUILD_ROOT/%{_lib}/security/pam_keyinit.so
 %clean
 rm -rf $RPM_BUILD_ROOT
 
-%post -p /sbin/ldconfig
+%post 
+%run_ldconfig
 
-%postun -p /sbin/ldconfig
+%postun
+%run_ldconfig
+
+%verifyscript
+%verify_permissions -e /sbin/unix_chkpwd
 
 %files -f Linux-PAM.lang
 %defattr(-,root,root)
@@ -226,7 +231,7 @@ rm -rf $RPM_BUILD_ROOT
 /%{_lib}/security/pam_wheel.so
 /%{_lib}/security/pam_xauth.so
 /sbin/pam_tally
-%attr (4755,root,shadow)/sbin/unix_chkpwd
+%verify(not mode) %attr (4755,root,shadow)/sbin/unix_chkpwd
 
 %files devel
 %defattr(644,root,root,755)
@@ -239,6 +244,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/libpam_misc.so
 
 %changelog -n pam
+* Wed Jan 24 2007 - mc@suse.de
+- add %%verify_permissions for /sbin/unix_chkpwd
+  [#237625]
 * Tue Jan 23 2007 - kukuk@suse.de
 - Update to Version 0.99.7.1 (security fix)
 * Wed Jan 17 2007 - kukuk@suse.de