diff --git a/grub.macros b/grub.macros
index d139096..95d92d6 100644
--- a/grub.macros
+++ b/grub.macros
@@ -548,7 +548,7 @@ touch ${RPM_BUILD_ROOT}/boot/%{name}/grub.cfg			\
 %endif}								\
 								\
 %{expand:%%files %{1}-cdboot}					\
-%defattr(0755,root,root,-)					\
-%attr(0755,root,root)%{efi_esp_dir}/%{3}			\
-%attr(0755,root,root)%{efi_esp_dir}/fonts			\
+%defattr(0700,root,root,-)					\
+%attr(0700,root,root)%{efi_esp_dir}/%{3}			\
+%attr(0700,root,root)%{efi_esp_dir}/fonts			\
 %{nil}
diff --git a/grub2.spec b/grub2.spec
index 7e8a0ea..266788a 100644
--- a/grub2.spec
+++ b/grub2.spec
@@ -7,7 +7,7 @@
 Name:		grub2
 Epoch:		1
 Version:	2.02
-Release:	48%{?dist}
+Release:	49%{?dist}
 Summary:	Bootloader with support for Linux, Multiboot and more
 Group:		System Environment/Base
 License:	GPLv3+
@@ -486,6 +486,9 @@ fi
 %endif
 
 %changelog
+* Tue Aug 07 2018 Peter Jones <pjones@redhat.com> - 2.02-49
+- Temporarily make -cdboot perms 0700 again.
+
 * Fri Aug 03 2018 Peter Jones <pjones@redhat.com> - 2.02-48
 - Kill .note.gnu.property with fire.
   Resolves: rhbz#1612339