diff --git a/pcs.spec b/pcs.spec
index dcb1026..3f499c7 100644
--- a/pcs.spec
+++ b/pcs.spec
@@ -578,9 +578,9 @@ run_all_tests
 %{_unitdir}/pcsd.service
 %{_unitdir}/pcsd-ruby.service
 %{_datadir}/bash-completion/completions/pcs
-%{_sharedstatedir}/pcsd
+%ghost %attr(0700,root,root) %{_sharedstatedir}/pcsd
+%ghost %attr(0700,root,root) %{_var}/log/pcsd
 %config(noreplace) %{_sysconfdir}/pam.d/pcsd
-%dir %{_var}/log/pcsd
 %config(noreplace) %{_sysconfdir}/logrotate.d/pcsd
 %config(noreplace) %{_sysconfdir}/sysconfig/pcsd
 %ghost %config(noreplace) %attr(0600,root,root) %{_sharedstatedir}/pcsd/cfgsync_ctl
@@ -589,7 +589,7 @@ run_all_tests
 %ghost %config(noreplace) %attr(0600,root,root) %{_sharedstatedir}/pcsd/pcsd.crt
 %ghost %config(noreplace) %attr(0600,root,root) %{_sharedstatedir}/pcsd/pcsd.key
 %ghost %config(noreplace) %attr(0644,root,root) %{_sharedstatedir}/pcsd/pcs_settings.conf
-%ghost %config(noreplace) %attr(0644,root,root) %{_sharedstatedir}/pcsd/pcs_users.conf
+%ghost %config(noreplace) %attr(0600,root,root) %{_sharedstatedir}/pcsd/pcs_users.conf
 %{_mandir}/man8/pcs.*
 %{_mandir}/man8/pcsd.*
 %exclude %{_libdir}/pcs/pcs_snmp_agent