diff --git a/.cvsignore b/.cvsignore
index 735bad6..f33f37f 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-sudo-1.6.3p7.tar.bz2
+sudo-1.6.4.tar.bz2
diff --git a/sources b/sources
index ef1df24..4dd88b7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-9faae0dae9b6193b5b583fe97a0601b3  sudo-1.6.3p7.tar.bz2
+4d8aaa1fc73e2625cda3a8ca57c9cd12  sudo-1.6.4.tar.bz2
diff --git a/sudo.spec b/sudo.spec
index ce42c1f..22e5b1b 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -1,7 +1,7 @@
 Summary: Allows restricted root access for specified users.
 Name: sudo
-Version: 1.6.3p7
-Release: 2
+Version: 1.6.4
+Release: 0.7x.2
 License: BSD
 Group: Applications/System
 Source: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.bz2
@@ -60,7 +60,7 @@ rm -rf $RPM_BUILD_ROOT
 %files
 %defattr(-,root,root)
 %doc BUGS CHANGES FAQ HISTORY README RUNSON TODO TROUBLESHOOTING *.pod
-%config(noreplace) /etc/sudoers
+%attr(0440,root,root) %config(noreplace) /etc/sudoers
 %config(noreplace) /etc/pam.d/sudo
 %dir /var/run/sudo
 %attr(4111,root,root) %{_bindir}/sudo
@@ -69,7 +69,14 @@ rm -rf $RPM_BUILD_ROOT
 %{_mandir}/man8/sudo.8*
 %{_mandir}/man8/visudo.8*
 
+# Make sure permissions are ok even if we're updating
+%post
+/bin/chmod 0440 /etc/sudoers || :
+
 %changelog
+* Mon Jan 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-1
+- Update to 1.6.4
+
 * Mon Jul 23 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.3p7-2
 - Add build requirements (#49706)
 - s/Copyright/License/