diff --git a/opencryptoki.spec b/opencryptoki.spec
index 2dd3a2c..d3aeb6c 100644
--- a/opencryptoki.spec
+++ b/opencryptoki.spec
@@ -223,6 +223,7 @@ fi
 %doc doc/README.token_data
 %dir %{_sysconfdir}/%{name}
 %config(noreplace) %{_sysconfdir}/%{name}/%{name}.conf
+%attr(0640, root, pkcs11) %config(noreplace) %{_sysconfdir}/%{name}/p11sak_defined_attrs.conf
 %{_tmpfilesdir}/%{name}.conf
 %{_unitdir}/pkcsslotd.service
 %{_sbindir}/p11sak