diff --git a/0001-don-t-use-f-in-dbxtool.service.patch b/0001-don-t-use-f-in-dbxtool.service.patch
new file mode 100644
index 0000000..c814b3d
--- /dev/null
+++ b/0001-don-t-use-f-in-dbxtool.service.patch
@@ -0,0 +1,28 @@
+From 8a6039df37353a3ef9208de0c4d63b611f549922 Mon Sep 17 00:00:00 2001
+From: Peter Jones <pjones@redhat.com>
+Date: Thu, 19 Oct 2017 12:46:53 -0400
+Subject: [PATCH] *don't* use -f in dbxtool.service
+
+Use -q to make it quiet but don't try to override it when we think it
+won't work.
+
+Related: rhbz#1489942
+
+Signed-off-by: Peter Jones <pjones@redhat.com>
+---
+ src/dbxtool.service | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/dbxtool.service b/src/dbxtool.service
+index fcfb6e6..1a2a829 100644
+--- a/src/dbxtool.service
++++ b/src/dbxtool.service
+@@ -7,4 +7,4 @@ WantedBy=multi-user.target
+ 
+ [Service]
+ RemainAfterExit=yes
+-ExecStart=/usr/bin/dbxtool -a /usr/share/dbxtool/ -q -f
++ExecStart=/usr/bin/dbxtool -a /usr/share/dbxtool/ -q
+-- 
+2.14.2
+
diff --git a/dbxtool.spec b/dbxtool.spec
index dbea0c6..61eb71f 100644
--- a/dbxtool.spec
+++ b/dbxtool.spec
@@ -1,6 +1,6 @@
 Name:           dbxtool
 Version:        8
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Secure Boot DBX updater
 License:        GPLv2
 URL:            https://github.com/vathpela/dbxtool
@@ -11,6 +11,7 @@ Requires:       efivar >= 31-3
 Requires(post): systemd
 Requires(preun):systemd
 Source0:        https://github.com/vathpela/dbxtool/releases/download/dbxtool-%{version}/dbxtool-%{version}.tar.bz2
+Patch0001:      0001-don-t-use-f-in-dbxtool.service.patch
 
 %description
 This package contains DBX updates for UEFI Secure Boot.
@@ -52,6 +53,11 @@ rm -f %{buildroot}/%{_docdir}/%{name}/COPYING
 %{_unitdir}/dbxtool.service
 
 %changelog
+* Thu Oct 19 2017 Peter Jones <pjones@redhat.com> - 8-2
+- Don't use -f in dbxtool.service; that'll make it do the thing we're
+  trying to avoid.
+  Resolves: rhbz#1489942
+
 * Wed Oct 18 2017 Peter Jones <pjones@redhat.com> - 8-1
 - Update to dbxtool 8
 - Make a "make coverity" rule to scan the source