diff --git a/spice-gtk.spec b/spice-gtk.spec
index 24b587c..6f53e89 100644
--- a/spice-gtk.spec
+++ b/spice-gtk.spec
@@ -13,7 +13,7 @@
 
 Name:           spice-gtk
 Version:        0.20
-Release:        3%{?dist}
+Release:        4%{?dist}
 Summary:        A GTK+ widget for SPICE clients
 
 Group:          System Environment/Libraries
@@ -228,7 +228,7 @@ rm -rf %{buildroot}%{_datadir}/pkgconfig/spice-protocol.pc
 %{_libdir}/libspice-controller.so.*
 %{_libdir}/girepository-1.0/SpiceClientGLib-2.0.typelib
 %dir %{_libexecdir}/spice-gtk-%{_arch}/
-%{_libexecdir}/spice-gtk-%{_arch}/spice-client-glib-usb-acl-helper
+%attr(4755, root, root) %{_libexecdir}/spice-gtk-%{_arch}/spice-client-glib-usb-acl-helper
 %{_datadir}/polkit-1/actions/org.spice-space.lowlevelusbaccess.policy
 
 %files -n spice-glib-devel
@@ -269,6 +269,9 @@ rm -rf %{buildroot}%{_datadir}/pkgconfig/spice-protocol.pc
 %{_bindir}/spicy-stats
 
 %changelog
+* Wed Aug 28 2013 Hans de Goede <hdegoede@redhat.com> - 0.20-4
+- Fix the spice-client-glib-usb-acl-helper no longer being suid root
+
 * Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.20-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild