diff --git a/configsnap.spec b/configsnap.spec
index 29e97f2..d5c089a 100644
--- a/configsnap.spec
+++ b/configsnap.spec
@@ -1,6 +1,6 @@
 Name:          configsnap
 Version:       0.12
-Release:       1%{?dist}
+Release:       2%{?dist}
 Summary:       Record and compare system state
 License:       ASL 2.0
 URL:           https://github.com/rackerlabs/%{name}
@@ -28,7 +28,7 @@ mkdir -p %{buildroot}%{_sbindir} \
   %{buildroot}%{_sysconfdir}/%{name}
 install -p -m 0755 %{name} %{buildroot}%{_sbindir}
 install -p -m 0644 %{name}.man %{buildroot}%{_mandir}/man1/%{name}.1
-install -p -m 0644 additional.conf %{buildroot}%{_sysconfdir}/%{name}/additional.conf
+install -p -m 0600 additional.conf %{buildroot}%{_sysconfdir}/%{name}/additional.conf
 
 %files
 %defattr(-,root,root,-)
@@ -43,7 +43,7 @@ install -p -m 0644 additional.conf %{buildroot}%{_sysconfdir}/%{name}/additional
 %{_sysconfdir}/%{name}
 
 %changelog
-* Mon Jun 12 2017 Piers Cornwell <piers.cornwell@rackspace.co.uk> 0.12-1
+* Mon Jun 12 2017 Piers Cornwell <piers.cornwell@rackspace.co.uk> 0.12-2
 - Record Pacemaker status
 - Don't raise exception if command doesn't exist
 - Add alternative path for lspci