diff --git a/iptables.spec b/iptables.spec
index 6d7785c..a3cdfce 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -166,8 +166,8 @@ done
 
 %files
 %doc COPYING INCOMPATIBILITIES
-%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/iptables-config
-%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/ip6tables-config
+%config(noreplace) %{_sysconfdir}/sysconfig/iptables-config
+%config(noreplace) %{_sysconfdir}/sysconfig/ip6tables-config
 %{_sbindir}/iptables*
 %{_sbindir}/ip6tables*
 %{_sbindir}/xtables-multi
@@ -199,10 +199,10 @@ done
 
 %files services
 %dir %{script_path}
-%attr(0755,root,root) %{script_path}/iptables.init
-%attr(0755,root,root) %{script_path}/ip6tables.init
-%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/iptables
-%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/ip6tables
+%{script_path}/iptables.init
+%{script_path}/ip6tables.init
+%config(noreplace) %{_sysconfdir}/sysconfig/iptables
+%config(noreplace) %{_sysconfdir}/sysconfig/ip6tables
 %{_unitdir}/iptables.service
 %{_unitdir}/ip6tables.service
 %dir %{legacy_actions}/iptables
@@ -222,6 +222,7 @@ done
 * Wed Mar 12 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8
 - add missing reload and panic actions
 - BuildRequires: pkgconfig(x) instead of x-devel
+- no need to specify file mode bits twice (in %%install and %%files)
 
 * Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 1.4.21-7
 - Don't order services after syslog.target.