diff --git a/shim.rpmmacros b/shim.rpmmacros
index 0d1cdba..d606297 100644
--- a/shim.rpmmacros
+++ b/shim.rpmmacros
@@ -179,10 +179,10 @@ install -m 0700 fb%{-a*}.efi						\\\
 # -A <EFIARCH>
 %define define_files(a:A:)						\
 %{expand:%%files -n shim-%{-a*}}					\
-%{efi_esp_dir}/*%{-a*}*.efi						\
-%{efi_esp_dir}/BOOT%{-A*}.CSV						\
-%{efi_esp_boot}/*%{-a*}.efi						\
-%{efi_esp_boot}/*%{-A*}.EFI						\
+%%verify(not mtime) %{efi_esp_dir}/*%{-a*}*.efi				\
+%%verify(not mtime) %{efi_esp_dir}/BOOT%{-A*}.CSV			\
+%%verify(not mtime) %{efi_esp_boot}/*%{-a*}.efi				\
+%%verify(not mtime) %{efi_esp_boot}/*%{-A*}.EFI				\
 %{nil}
 
 %ifarch x86_64
diff --git a/shim.spec b/shim.spec
index 692292e..7dcdfe8 100644
--- a/shim.spec
+++ b/shim.spec
@@ -1,6 +1,6 @@
 Name:		shim
 Version:	15.8
-Release:	1.el8
+Release:	2.el8
 Summary:	First-stage UEFI bootloader
 License:	BSD
 URL:		https://github.com/rhboot/shim/
@@ -107,10 +107,14 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
 %endif
 
 %if %{provide_legacy_shim}
-%{efi_esp_dir}/shim.efi
+%verify(not mtime) %{efi_esp_dir}/shim.efi
 %endif
 
 %changelog
+* Thu Mar 28 2024 Peter Jones <pjones@redhat.com> - 15.8-2.el8
+- Fix rpm verify issue found in testing.
+  Related: RHEL-11259
+
 * Thu Mar 21 2024 Peter Jones <pjones@redhat.com> - 15.8-1.el8
 - Update to shim-15.8 for CVE-2023-40547
   Resolves: RHEL-11259