diff --git a/filesystem.spec b/filesystem.spec
index e33144d..bb71d17 100644
--- a/filesystem.spec
+++ b/filesystem.spec
@@ -1,6 +1,6 @@
 Summary: The basic directory layout for a Linux system
 Name: filesystem
-Version: 2.4.29
+Version: 2.4.30
 Release: 1%{?dist}
 License: Public Domain
 URL: https://fedorahosted.org/filesystem
@@ -107,16 +107,16 @@ done
 rm -rf %{buildroot}
 
 %files -f filelist
-%defattr(0755,root,root)
-%dir /
-/bin
-/boot
+%defattr(0755,root,root,-)
+%dir %attr(555,root,root) /
+%attr(555,root,root) /bin
+%attr(555,root,root) /boot
 /dev
 /etc
 /home
-/lib
+%attr(555,root,root) /lib
 %ifarch x86_64 ppc ppc64 sparc sparc64 s390 s390x
-/%{_lib}
+%attr(555,root,root) /%{_lib}
 %endif
 /media
 %dir /mnt
@@ -124,15 +124,24 @@ rm -rf %{buildroot}
 %ghost %config(missingok) %verify(not size md5 mode user link rdev group mtime) /mnt/floppy
 %dir /opt
 %attr(555,root,root) /proc
-%attr(750,root,root) /root
-/sbin
+%attr(550,root,root) /root
+%attr(555,root,root) /sbin
 /selinux
 /srv
 /sys
 %attr(1777,root,root) /tmp
 %dir /usr
-/usr/[^s]*
-/usr/sbin
+%attr(555,root,root) /usr/bin
+/usr/etc
+/usr/games
+/usr/include
+%attr(555,root,root) /usr/lib
+%ifarch x86_64 ppc ppc64 sparc sparc64 s390 s390x
+%attr(555,root,root) /usr/%{_lib}
+%endif
+/usr/libexec
+/usr/local
+%attr(555,root,root) /usr/sbin
 %dir /usr/share
 /usr/share/applications
 /usr/share/augeas
@@ -158,6 +167,7 @@ rm -rf %{buildroot}
 /usr/share/xsessions
 /usr/share/X11
 /usr/src
+/usr/tmp
 %dir /var
 /var/db
 /var/games
@@ -180,6 +190,9 @@ rm -rf %{buildroot}
 /var/yp
 
 %changelog
+* Mon Aug 17 2009 Ondrej Vasik <ovasik@redhat.com> 2.4.30-1
+- adjust directory rights for usage of capabilities(#517575)
+
 * Mon Aug 10 2009 Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
 - iso_codes package no longer provides tab files, do generate
   them on fly with sed (thanks D. Tardon)