diff --git a/SOURCES/valkey.tmpfiles b/SOURCES/valkey.tmpfiles
index 2383ddb..2c99bad 100644
--- a/SOURCES/valkey.tmpfiles
+++ b/SOURCES/valkey.tmpfiles
@@ -1,3 +1,4 @@
-D /run/valkey 0755 valkey valkey -
-d /var/lib/valkey 0750 valkey valkey -
-d /var/log/valkey 0750 valkey valkey -
+Z /etc/valkey     ~0750 valkey root   -
+D /run/valkey      0755 valkey valkey -
+d /var/lib/valkey  0750 valkey valkey -
+d /var/log/valkey  0750 valkey valkey -
diff --git a/SPECS/valkey.spec b/SPECS/valkey.spec
index cb9d50d..7bb12cd 100644
--- a/SPECS/valkey.spec
+++ b/SPECS/valkey.spec
@@ -3,7 +3,7 @@
 
 Name:              valkey
 Version:           8.0.4
-Release:           2%{?dist}
+Release:           3%{?dist}
 Summary:           A persistent key-value database
 # valkey: BSD-3-Clause
 # hiredis: BSD-3-Clause
@@ -268,6 +268,9 @@ taskset -c 1 ./runtest --clients 50 --skiptest "Active defrag - AOF loading"
 
 
 %changelog
+* Tue Sep  9 2025 Remi Collet <remi@fedoraproject.org> - 8.0.4-3
+- fix ImageMode: ensure ownership of /etc/valkey
+
 * Fri Aug  1 2025 Remi Collet <remi@fedoraproject.org> - 8.0.4-2
 - fix ImageMode: add tmpfiles.d entries for directories below /var