diff --git a/sssd.spec b/sssd.spec
index 9e3c59b..1a9775c 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -27,7 +27,7 @@
 
 Name: sssd
 Version: 2.9.5
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: System Security Services Daemon
 License: GPLv3+
 URL: https://github.com/SSSD/sssd/
@@ -992,7 +992,7 @@ done
 %config(noreplace) %{_sysconfdir}/krb5.conf.d/sssd_enable_idp
 
 %files passkey
-%attr(755,%{sssd_user},%{sssd_user}) %{_libexecdir}/%{servicename}/passkey_child
+%{_libexecdir}/%{servicename}/passkey_child
 %{_libdir}/%{name}/modules/sssd_krb5_passkey_plugin.so
 %{_datadir}/sssd/krb5-snippets/sssd_enable_passkey
 %config(noreplace) %{_sysconfdir}/krb5.conf.d/sssd_enable_passkey
@@ -1086,6 +1086,9 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Mon Jul  8 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-3
+- Resolves: RHEL-40742 - passkey_child with wrong owner
+
 * Mon Jun 24 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
 - Resolves: RHEL-40742 - passkey_child with wrong owner
 - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups