diff --git a/kdump.init b/kdump.init
index 476971d..fa06678 100644
--- a/kdump.init
+++ b/kdump.init
@@ -250,7 +250,7 @@ function propagate_ssh_key()
 	SSH_SERVER=`echo $SSH_TARGET | sed -e's/\(.*@\)\(.*$\)/\2/'`
  
 	#now send the found key to the found server
-	cat $KEYFILE | ssh -x $SSH_USER@$SSH_SERVER "mkdir -p ~$SSH_USER/.ssh; chmod 700 ~$SSH_USER/.ssh;  cat >> ~$SSH_USER/.ssh/authorized_keys2"
+	cat $KEYFILE | ssh -x $SSH_USER@$SSH_SERVER "mkdir -p ~$SSH_USER/.ssh; chmod 700 ~$SSH_USER/.ssh;  cat >> ~$SSH_USER/.ssh/authorized_keys2; chmod 600 ~$SSH_USER/.ssh/authorized_keys2"
 	RET=$?
 	if [ $RET == 0 ]; then
 		echo $KEYFILE has been added to ~$SSH_USER/.ssh/authorized_keys2 on $SSH_SERVER
diff --git a/kexec-tools.spec b/kexec-tools.spec
index de1ee71..9ca43c5 100644
--- a/kexec-tools.spec
+++ b/kexec-tools.spec
@@ -1,6 +1,6 @@
 Name: kexec-tools
 Version: 1.101
-Release: 68%{?dist}
+Release: 69%{?dist}
 License: GPL
 Group: Applications/System
 Summary: The kexec/kdump userspace component.
@@ -251,6 +251,9 @@ rm -f %{_datadir}/firstboot/modules/firstboot_kdump.py
 %doc kexec-kdump-howto.txt
 
 %changelog
+* Wed Apr 11 2007 Neil Horman <nhorman@redhat.com> - 1.101-69%{dist}
+- Fixed up kdump.init to enforce mode 600 on authorized_keys2 (bz 235986)
+
 * Tue Apr 10 2007 Neil Horman <nhorman@redhat.com> - 1.101-68%{dist}
 - Fix alignment of bootargs and device-tree structures on ppc64