diff --git a/publicsuffix-list.spec b/publicsuffix-list.spec
index 2f6f880..53986e3 100644
--- a/publicsuffix-list.spec
+++ b/publicsuffix-list.spec
@@ -2,7 +2,7 @@
 
 Name:           publicsuffix-list
 Version:        20210518
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Cross-vendor public domain suffix database
 
 License:        MPLv2.0
@@ -46,7 +46,7 @@ for runtime loading.
 %prep
 %setup -c -T
 cp -av %{SOURCE0} .
-cp -av %{SOURCE1} COPYING
+install -m 644 -p -v %{SOURCE1} COPYING
 
 
 %build
@@ -82,6 +82,9 @@ ln -s public_suffix_list.dat $RPM_BUILD_ROOT/%{_datadir}/publicsuffix/effective_
 
 
 %changelog
+* Thu Feb 10 2022 Kamil Dudka <kdudka@redhat.com> - 20210518-3
+- unset writable-by-group permission bit on the license file
+
 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 20210518-2
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688