diff --git a/.cvsignore b/.cvsignore
index 58d2acb..32111ee 100644
--- a/.cvsignore
+++ b/.cvsignore
@@ -1 +1 @@
-setup-2.8.15.tar.bz2
+setup-2.8.17.tar.bz2
diff --git a/setup.spec b/setup.spec
index 31c4bce..3f419dc 100644
--- a/setup.spec
+++ b/setup.spec
@@ -1,6 +1,6 @@
 Summary: A set of system configuration and setup files
 Name: setup
-Version: 2.8.15
+Version: 2.8.17
 Release: 1%{?dist}
 License: Public Domain
 Group: System Environment/Base
@@ -64,21 +64,21 @@ end
 %verify(not md5 size mtime) %config(noreplace) /etc/group
 %verify(not md5 size mtime) %attr(0000,root,root) %config(noreplace,missingok) /etc/shadow
 %verify(not md5 size mtime) %attr(0000,root,root) %config(noreplace,missingok) /etc/gshadow
-%verify(not md5 size mtime) %config(noreplace) /etc/services
+%config(noreplace) /etc/services
 %verify(not md5 size mtime) %config(noreplace) /etc/exports
 %config(noreplace) /etc/aliases
 %config(noreplace) /etc/environment
 %config(noreplace) /etc/filesystems
 %config(noreplace) /etc/host.conf
 %verify(not md5 size mtime) %config(noreplace) /etc/hosts
-%verify(not md5 size mtime) %config(noreplace) /etc/hosts.allow
-%verify(not md5 size mtime) %config(noreplace) /etc/hosts.deny
+%config(noreplace) /etc/hosts.allow
+%config(noreplace) /etc/hosts.deny
 %verify(not md5 size mtime) %config(noreplace) /etc/motd
 %config(noreplace) /etc/printcap
 %verify(not md5 size mtime) %config(noreplace) /etc/inputrc
 %config(noreplace) /etc/bashrc
 %config(noreplace) /etc/profile
-%verify(not md5 size mtime) %config(noreplace) /etc/protocols
+%config(noreplace) /etc/protocols
 %attr(0600,root,root) %config(noreplace,missingok) /etc/securetty
 %config(noreplace) /etc/csh.login
 %config(noreplace) /etc/csh.cshrc
@@ -89,6 +89,24 @@ end
 %ghost %verify(not md5 size mtime) %config(noreplace,missingok) /etc/mtab
 
 %changelog
+* Wed Mar 31 2010 Ondrej Vasik <ovasik@redhat.com> 2.8.17-1
+- verify md5sum/size/mtime in the case of /etc/hosts.allow
+  and /etc/hosts.deny (#578263)
+- do the same for /etc/services and /etc/protocols, we
+  provide (almost) complete IANA set, so no reason to modify
+  it in most cases outside of setup package
+
+* Fri Mar 26 2010 Ondrej Vasik <ovasik@redhat.com> 2.8.16-3
+- bad ugly double-thirteen friday(fix previous badfix)
+
+* Fri Mar 26 2010 Ondrej Vasik <ovasik@redhat.com> 2.8.16-2
+- fix not set path for csh shell caused by 2.8.16 update
+
+* Fri Mar 26 2010 Ondrej Vasik <ovasik@redhat.com> 2.8.16-1
+- drop X11R6 hierarchy dir from tcsh path (#576940)
+- update services to latest IANA
+- update protocols to latest IANA
+
 * Thu Jan 21 2010 Ondrej Vasik <ovasik@redhat.com> 2.8.15-1
 - reserve uidgid pair 155:155 for stap-server(#555813)
 - reserve uidgid pair 113:113 for usbmuxd(#556525)
diff --git a/sources b/sources
index 9cf5a1e..873135c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-03386f2ea3337e469e746c848e6150b4  setup-2.8.15.tar.bz2
+a062e8fdf5784e1d57bef2cb42766154  setup-2.8.17.tar.bz2