diff --git a/community-mysql.spec b/community-mysql.spec
index 10912bc..114154c 100644
--- a/community-mysql.spec
+++ b/community-mysql.spec
@@ -65,7 +65,7 @@
 
 Name:             %{pkgname}
 Version:          5.6.21
-Release:          4%{?with_debug:.debug}%{?dist}
+Release:          5%{?with_debug:.debug}%{?dist}
 Summary:          MySQL client programs and shared libraries
 Group:            Applications/Databases
 URL:              http://www.mysql.com
@@ -924,6 +924,9 @@ fi
 %endif
 
 %changelog
+* Wed Oct 08 2014 Bjorn Munch <bjorn.munch@oracle.com> - 5.6.21-5
+- Fix rhbz #1149986
+
 * Wed Oct 01 2014 Honza Horak <hhorak@redhat.com> - 5.6.21-4
 - Add bcond_without mysql_names
 
diff --git a/mysql.service.in b/mysql.service.in
index a33df16..2f09a0a 100644
--- a/mysql.service.in
+++ b/mysql.service.in
@@ -32,6 +32,9 @@ Type=simple
 User=mysql
 Group=mysql
 
+# Execute pre and post scripts as root
+PermissionsStartOnly=true
+
 ExecStartPre=@libexecdir@/mysql-check-socket
 ExecStartPre=@libexecdir@/mysql-prepare-db-dir %n
 # Note: we set --basedir to prevent probes that might trigger SELinux alarms,