diff --git a/keylime.spec b/keylime.spec
index 59fafba..db38d48 100644
--- a/keylime.spec
+++ b/keylime.spec
@@ -2,7 +2,7 @@
 
 Name:    keylime
 Version: 6.3.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 Summary: Open source TPM software for Bootstrapping and Maintaining Trust
 
 BuildArch:      noarch
@@ -96,11 +96,14 @@ cp -r ./tpm_cert_store %{buildroot}%{_sharedstatedir}/keylime/
 %{_bindir}/%{srcname}_userdata_encrypt
 %{_bindir}/%{srcname}_ima_emulator
 %{_bindir}/%{srcname}_webapp
-%config(noreplace) %{_sysconfdir}/%{srcname}.conf
+%config(noreplace) %attr(600,root,root) %{_sysconfdir}/%{srcname}.conf
 %{_unitdir}/*
 %{_sharedstatedir}/keylime/tpm_cert_store/*
 
 %changelog
+* Thu Jan 27 2022 Sergio Correia <scorreia@redhat.com> - 6.3.0-2
+- Fix permissions of config file
+
 * Thu Jan 27 2022 Sergio Correia <scorreia@redhat.com> - 6.3.0-1
 - Updating for Keylime release v6.3.0