diff --git a/aaa_base.changes b/aaa_base.changes
index 52b5f92..a081c24 100644
--- a/aaa_base.changes
+++ b/aaa_base.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Fri Jul 20 22:21:40 UTC 2012 - jengelh@inai.de
+
+- Add %defattr to make files definitely owned by root
+
 -------------------------------------------------------------------
 Fri Jul 20 15:08:57 UTC 2012 - werner@suse.de
 
diff --git a/aaa_base.spec b/aaa_base.spec
index 58f96e7..0b06b48 100644
--- a/aaa_base.spec
+++ b/aaa_base.spec
@@ -251,6 +251,7 @@ rm -f /root/.gnupg/secring.gpg.aaa_save
 /usr/share/man/man8/quick_halt.8*
 
 %files malloccheck
+%defattr(-,root,root)
 %config /etc/profile.d/malloc-debug.sh
 %config /etc/profile.d/malloc-debug.csh