diff --git a/subversion.spec b/subversion.spec
index e753db1..053559f 100644
--- a/subversion.spec
+++ b/subversion.spec
@@ -410,7 +410,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %{_sysconfdir}/subversion
 %exclude %{_mandir}/man*/*::*
 %{_unitdir}/*.service
-%dir /run/svnserve
+%attr(0700,root,root) %dir /run/svnserve
 %{_prefix}/lib/tmpfiles.d/svnserve.conf
 
 %files tools -f tools.files
@@ -480,6 +480,9 @@ rm -rf ${RPM_BUILD_ROOT}
 %endif
 
 %changelog
+* Mon Jan  6 2014 Joe Orton <jorton@redhat.com> - 1.8.5-2
+- fix permissions of /run/svnserve (#1048422)
+
 * Tue Dec 10 2013 Joe Orton <jorton@redhat.com> - 1.8.5-2
 - don't drop -Wall when building swig Perl bindings (#1037341)