diff --git a/.gitignore b/.gitignore
index 701deb2..e9912f0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,4 @@
 /gssproxy-0.7.0.tar.gz.sha512sum.txt
 /gssproxy-0.8.0.tar.gz
 /gssproxy-0.8.0.tar.gz.sha512sum.txt
+/rwtab
diff --git a/gssproxy.spec b/gssproxy.spec
index 8c82b22..fb5254a 100644
--- a/gssproxy.spec
+++ b/gssproxy.spec
@@ -1,13 +1,14 @@
 Name:		gssproxy
 
 Version:	0.8.0
-Release:	8%{?dist}
+Release:	9%{?dist}
 Summary:	GSSAPI Proxy
 
 Group:		System Environment/Libraries
 License:	MIT
 URL:		https://pagure.io/gssproxy
 Source0:	https://releases.pagure.org/%{name}/%{name}-%{version}.tar.gz
+Source1:	rwtab
 
 %global servicename gssproxy
 %global pubconfpath %{_sysconfdir}/gssproxy
@@ -84,7 +85,8 @@ install -m644 examples/99-nfs-client.conf %{buildroot}%{_sysconfdir}/gssproxy/99
 mkdir -p %{buildroot}%{_sysconfdir}/gss/mech.d
 install -m644 examples/mech %{buildroot}%{_sysconfdir}/gss/mech.d/gssproxy.conf
 mkdir -p %{buildroot}%{gpstatedir}/rcache
-
+mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
+install -m644 %{SOURCE1} $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d/gssproxy
 
 %files
 %license COPYING
@@ -102,6 +104,7 @@ mkdir -p %{buildroot}%{gpstatedir}/rcache
 %{_mandir}/man5/gssproxy.conf.5*
 %{_mandir}/man8/gssproxy.8*
 %{_mandir}/man8/gssproxy-mech.8*
+%config(noreplace) %{_sysconfdir}/rwtab.d/gssproxy
 
 %post
 %systemd_post gssproxy.service
@@ -113,6 +116,9 @@ mkdir -p %{buildroot}%{gpstatedir}/rcache
 %systemd_postun_with_restart gssproxy.service
 
 %changelog
+* Tue Dec 11 2018 Robbie Harwood <rharwood@redhat.com> - 0.8.0-9
+- Add hack to support read-only root
+
 * Tue Oct 02 2018 Robbie Harwood <rharwood@redhat.com> - 0.8.0-8
 - Update docs to reflect actual behavior of krb5_principal
 
diff --git a/sources b/sources
index 43680cd..c4933a2 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,3 @@
 SHA512 (gssproxy-0.8.0.tar.gz) = f3b8f053d6750d7ee6ab2bfb6bfc4dc1ac2e2f354f923590340bb3c522f57cc881df5a2850750bc00c0dcacf2ae173549dc3bb9ece4512cf2f39869527afc2ec
 SHA512 (gssproxy-0.8.0.tar.gz.sha512sum.txt) = e31628602f6b4261c1f828c31b30649075c9016088371e82d09daf70461f82f329cc9f2e49d5cd5199b2d7c319829f572251ab7f83bbe0eee104021879518385
+SHA512 (rwtab) = 35bf5dda822a025fa4f3c94095abd3ff5279dc263ec870e74517a3eb1a3b331bb71d8894f65dc1b129aefcc3eae9c38033ba6ec41289b5b1abeffeddfb1ac86f