diff --git a/bluez.spec b/bluez.spec
index c0b7195..e89da12 100644
--- a/bluez.spec
+++ b/bluez.spec
@@ -6,7 +6,7 @@
 
 Name:    bluez
 Version: 5.70
-Release: 1%{?dist}
+Release: 2%{?dist}
 Summary: Bluetooth utilities
 License: GPLv2+
 URL:     http://www.bluez.org/
@@ -233,7 +233,9 @@ install emulator/btvirt ${RPM_BUILD_ROOT}/%{_libexecdir}/bluetooth/
 %files
 %license COPYING
 %doc AUTHORS ChangeLog
-%dir %{_sysconfdir}/bluetooth
+# bluetooth.service expects configuraton directory to be read only
+# https://github.com/bluez/bluez/issues/329#issuecomment-1102459104
+%attr(0555, root, root) %dir %{_sysconfdir}/bluetooth
 %config(noreplace) %{_sysconfdir}/bluetooth/main.conf
 %{_bindir}/avinfo
 %{_bindir}/bluemoon
@@ -257,7 +259,9 @@ install emulator/btvirt ${RPM_BUILD_ROOT}/%{_libexecdir}/bluetooth/
 %dir %{_libexecdir}/bluetooth
 %{_libexecdir}/bluetooth/bluetoothd
 %{_libdir}/bluetooth/
-%{_localstatedir}/lib/bluetooth
+# bluetooth.service expects StateDirectoryMode to be 700.
+%attr(0700, root, root) %dir %{_localstatedir}/lib/bluetooth
+%dir %{_localstatedir}/lib/bluetooth/mesh
 %{_datadir}/dbus-1/system.d/bluetooth.conf
 %{_datadir}/dbus-1/system-services/org.bluez.service
 %{_unitdir}/bluetooth.service
@@ -323,6 +327,11 @@ install emulator/btvirt ${RPM_BUILD_ROOT}/%{_libexecdir}/bluetooth/
 %{_userunitdir}/obex.service
 
 %changelog
+* Mon Oct 02 2023 Sandro Bonazzola <sbonazzo@redhat.com> - 5.70-2
+- Fix access modes for /etc/bluetooth and /var/lib/bluetooth as expected
+  by bluetooth.service.
+- Resolves: fedora#2144504
+
 * Fri Sep 29 2023 Peter Robinson <pbrobinson@fedoraproject.org> - 5.70-1
 - Update to 5.70
 - Enable some Bluetooth LE features