diff --git a/permissions b/permissions
index 89fbbb4..63b781a 100644
--- a/permissions
+++ b/permissions
@@ -175,8 +175,9 @@
 # netatalk printer daemon: sgid not needed any more with cups.
 /usr/sbin/papd                                          root:lp           0755
 
-# safe as long as we don't change files below it (#103186)
-/var/games/                                             games:games       0775
+# games:games 775 safe as long as we don't change files below it (#103186)
+# still people do it (#429882) so root:root 755 is the consequence.
+/var/games/                                             root:root         0755
 
 # No longer common. Set setuid bit yourself if you need it
 # (#66191)
diff --git a/permissions.changes b/permissions.changes
index 17ee4c6..8929b49 100644
--- a/permissions.changes
+++ b/permissions.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Sep 25 15:38:39 CEST 2008 - lnussel@suse.de
+
+- change /var/games to 755 to prevent ill-considered maneuvers there
+  (bnc#429882)
+
 -------------------------------------------------------------------
 Thu Sep 11 17:03:04 CEST 2008 - lnussel@suse.de
 
diff --git a/permissions.spec b/permissions.spec
index f735368..cc131c1 100644
--- a/permissions.spec
+++ b/permissions.spec
@@ -1,5 +1,5 @@
 #
-# spec file for package permissions (Version 2008.9.13)
+# spec file for package permissions (Version 2008.9.26)
 #
 # Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -22,7 +22,7 @@ Name:           permissions
 License:        GPL v2 or later
 Group:          Productivity/Security
 AutoReqProv:    on
-Version:        2008.9.13
+Version:        2008.9.26
 Release:        1
 Provides:       aaa_base:/etc/permissions
 Requires:       /sbin/SuSEconfig
@@ -91,6 +91,9 @@ install -m 644 %{SOURCE9} $RPM_BUILD_ROOT/etc
 /var/adm/fillup-templates/sysconfig.security
 
 %changelog
+* Thu Sep 25 2008 lnussel@suse.de
+- change /var/games to 755 to prevent ill-considered maneuvers there
+  (bnc#429882)
 * Thu Sep 11 2008 lnussel@suse.de
 - remove static smpppd config file permissions
 - fix permissions of polkit-set-default-helper