diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
index 89b41adefd..0afd05f50d 100644
--- a/contrib/sssd.spec.in
+++ b/contrib/sssd.spec.in
@@ -857,7 +857,7 @@ install -D -p -m 0644 %{SOURCE1} %{buildroot}%{_sysusersdir}/sssd.conf
 %attr(750,root,%{sssd_user}) %dir %{_sysconfdir}/sssd
 %attr(750,root,%{sssd_user}) %dir %{_sysconfdir}/sssd/conf.d
 %attr(750,root,%{sssd_user}) %dir %{_sysconfdir}/sssd/pki
-%ghost %attr(0600,%{sssd_user},%{sssd_user}) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
+%ghost %attr(0640,root,%{sssd_user}) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
 %dir %{_sysconfdir}/logrotate.d
 %config(noreplace) %{_sysconfdir}/logrotate.d/sssd
 %dir %{_sysconfdir}/rwtab.d