diff --git a/.gitignore b/.gitignore
index f15a800..7857a09 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,2 @@
-/chrony-3.1-pre1.tar.gz
+/chrony-3.1.tar.gz
 /clknetsim-ce89a1.tar.gz
diff --git a/chrony-service-helper.patch b/chrony-service-helper.patch
index fa76883..fe11392 100644
--- a/chrony-service-helper.patch
+++ b/chrony-service-helper.patch
@@ -1,11 +1,11 @@
-diff -up chrony-1.31/examples/chronyd.service.service-helper chrony-1.31/examples/chronyd.service
---- chrony-1.31/examples/chronyd.service.service-helper	2014-09-10 17:00:54.000000000 +0200
-+++ chrony-1.31/examples/chronyd.service	2014-07-03 18:09:45.000000000 +0200
-@@ -8,6 +8,7 @@ Type=forking
+diff -up chrony-3.1/examples/chronyd.service.service-helper chrony-3.1/examples/chronyd.service
+--- chrony-3.1/examples/chronyd.service.service-helper	2017-01-31 12:12:01.863772826 +0100
++++ chrony-3.1/examples/chronyd.service	2017-01-31 12:12:30.371860064 +0100
+@@ -10,6 +10,7 @@ Type=forking
  PIDFile=/var/run/chronyd.pid
  EnvironmentFile=-/etc/sysconfig/chronyd
  ExecStart=/usr/sbin/chronyd $OPTIONS
 +ExecStartPost=/usr/libexec/chrony-helper update-daemon
- 
- [Install]
- WantedBy=multi-user.target
+ PrivateTmp=yes
+ ProtectHome=yes
+ ProtectSystem=full
diff --git a/chrony.spec b/chrony.spec
index 17685d6..7116a70 100644
--- a/chrony.spec
+++ b/chrony.spec
@@ -1,5 +1,4 @@
 %global _hardened_build 1
-%global prerelease -pre1
 %global clknetsim_ver ce89a1
 %bcond_without debug
 
@@ -64,12 +63,12 @@ clocks, system real-time clock or manual input as time references.
 
 # review changes in packaged configuration files and scripts
 md5sum -c <<-EOF | (! grep -v 'OK$')
-        befa1539d00fd6f2ac52a08f098c9b77  examples/chrony-wait.service
-        5d29f7cefeffe28aafdf017fa8fb51dc  examples/chrony.conf.example2
+        47ad7eccc410b981d2f2101cf5682616  examples/chrony-wait.service
+        58978d335ec3752ac2c38fa82b48f0a5  examples/chrony.conf.example2
         ba6bb05c50e03f6b5ab54a2b7914800d  examples/chrony.keys.example
         6a3178c4670de7de393d9365e2793740  examples/chrony.logrotate
         298b7f611078aa0176aad58e936c7b0d  examples/chrony.nm-dispatcher
-        b347cbf0b4ba3ba9995f2f8930667e8f  examples/chronyd.service
+        a85246982a89910b1e2d3356b7d131d7  examples/chronyd.service
 EOF
 
 # use our vendor zone (2.*pool.ntp.org names include IPv6 addresses)
diff --git a/sources b/sources
index 116f7eb..5f5ef6e 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (chrony-3.1-pre1.tar.gz) = 60767bd7110f507b1947fd5f952b5aa9173c9a924d8db4158bd68c780a2618d62e6ed50ed1423b57528c5b7746e439bca67f820c8630a777e22ee647dc81c8fc
+SHA512 (chrony-3.1.tar.gz) = 4ba3a75c3634050bb63ba9ee80d9be7a295f44ce4d195a050e4be4738bd7dd807fe37f2289d7ead4a75272bd5ebadbd03c233c67f859e9b68871fca5a6671427
 SHA512 (clknetsim-ce89a1.tar.gz) = 88888559439c570099bf66aff86d7260402b3110514da1c27b5620a97716c2eed416ba12e43e63705d7abd08d0f3f926df28730addd0e7ccb97f36b6a6480fd7