diff --git a/audit.spec b/audit.spec
index 548e6b9..963426f 100644
--- a/audit.spec
+++ b/audit.spec
@@ -180,6 +180,7 @@ if [ "$files" -eq 0 ] ; then
 	else
 		touch /etc/audit/rules.d/audit.rules
 	fi
+	chmod 0640 /etc/audit/rules.d/audit.rules
 fi
 %systemd_post auditd.service