diff --git a/sssd.spec b/sssd.spec
index 724de9e..97f76b5 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -656,7 +656,9 @@ fi
 %_sysusersdir/*sssd*
 %_tmpfilesdir/*sssd*
 %permissions_path/sssd
-%_datadir/polkit-1/
+%dir %_datadir/polkit-1
+%attr(0555,root,root) %dir %_datadir/polkit-1/rules.d
+%_datadir/polkit-1/rules.d/*
 %_bindir/sss_ssh_*
 %_sbindir/sssd
 %if 0%{?suse_version} < 1600