diff --git a/shadow.spec b/shadow.spec
index 528ac3f..9c4024e 100644
--- a/shadow.spec
+++ b/shadow.spec
@@ -256,7 +256,6 @@ test -f %{_sysconfdir}/login.defs.rpmsave && mv -v %{_sysconfdir}/login.defs.rpm
 %set_permissions %{_bindir}/passwd
 %set_permissions %{_bindir}/newgidmap
 %set_permissions %{_bindir}/newuidmap
-%set_permissions %{_bindir}/getsubids
 
 %service_add_post shadow.service shadow.timer
 
@@ -270,7 +269,6 @@ test -f %{_sysconfdir}/login.defs.rpmsave && mv -v %{_sysconfdir}/login.defs.rpm
 %verify_permissions %{_bindir}/passwd
 %verify_permissions %{_bindir}/newgidmap
 %verify_permissions %{_bindir}/newuidmap
-%verify_permissions %{_bindir}/getsubids
 
 %preun
 %service_del_preun shadow.service shadow.timer
@@ -337,9 +335,9 @@ test -f %{_sysconfdir}/login.defs.rpmsave && mv -v %{_sysconfdir}/login.defs.rpm
 %verify(not mode) %attr(4755,root,shadow) %{_bindir}/passwd
 %verify(not mode) %attr(4755,root,shadow) %{_bindir}/newgidmap
 %verify(not mode) %attr(4755,root,shadow) %{_bindir}/newuidmap
-%verify(not mode) %attr(4755,root,shadow) %{_bindir}/getsubids
 %{_bindir}/lastlog
 %{_bindir}/sg
+%{_bindir}/getsubids
 %attr(0755,root,root) %{_sbindir}/groupadd
 %attr(0755,root,root) %{_sbindir}/groupdel
 %attr(0755,root,root) %{_sbindir}/groupmod