diff --git a/nftables.spec b/nftables.spec
index 6374428..e383326 100644
--- a/nftables.spec
+++ b/nftables.spec
@@ -3,7 +3,7 @@
 Name:           nftables
 Version:        0.9.0
 #Release:        0.1.%%{snapdate}git%%{?dist}
-Release:        5%{?dist}
+Release:        6%{?dist}
 # Upstream released a 0.100 version, then 0.4. Need Epoch to get back on track.
 Epoch:          1
 Summary:        Netfilter Tables userspace utillites
@@ -63,8 +63,11 @@ cp -a %{SOURCE1} $RPM_BUILD_ROOT/%{_unitdir}/
 
 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig
 cp -a %{SOURCE2} $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/
+chmod 600 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/nftables.conf
 
-mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
+mkdir -m 700 -p $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
+chmod 600 $RPM_BUILD_ROOT/%{_sysconfdir}/nftables/*
+chmod 700 $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
 
 %post
 %systemd_post nftables.service
@@ -96,6 +99,9 @@ mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
 %{_includedir}/nftables/libnftables.h
 
 %changelog
+* Sat Mar 16 2019 Kevin Fenzi <kevin@scrye.com> - 1:0.9.0-6
+- Fix permissions. Bug #1685242
+
 * Sun Feb 17 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1:0.9.0-5
 - Rebuild for readline 8.0