diff --git a/wordpress.spec b/wordpress.spec
index 720f4fd..be28282 100644
--- a/wordpress.spec
+++ b/wordpress.spec
@@ -12,7 +12,7 @@ URL:        http://www.wordpress.org
 Name:       wordpress
 Version:    3.9.2
 Group:      Applications/Publishing
-Release:    2%{?dist}
+Release:    3%{?dist}
 License:    GPLv2
 
 Source0:    http://wordpress.org/%{name}-%{version}.tar.gz
@@ -246,17 +246,22 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %attr(0775,apache,ftp) %{wp_content}/uploads
 %{wp_content}/plugins/*
 %{wp_content}/themes/*
-%doc license.txt
+%{!?_licensedir:%global license %%doc}
+%license license.txt
 %doc readme.html
 %doc README.fedora
 %doc README.fedora-multiuser
 %{_datadir}/wordpress/wp-*.php
+%attr(750,root,apache) %dir               %{_sysconfdir}/wordpress
 %attr(640,root,apache) %config(noreplace) %{_sysconfdir}/wordpress/wp-config.php
 %{_datadir}/wordpress/xmlrpc.php
-%dir %{_sysconfdir}/wordpress
 
 %changelog
-* Thu Aug  7 2014 Remi Collet <remi@fedoraproject.org> - 3.9.2-1
+* Fri Aug  8 2014 Remi Collet <remi@fedoraproject.org> - 3.9.2-3
+- config dir only readable by apache group, better fix for #1124582
+- fix license handling
+
+* Thu Aug  7 2014 Remi Collet <remi@fedoraproject.org> - 3.9.2-2
 - update to 3.9.2 Security Release #1127547
 - config file only readable by apache user (httpd or php-fpm) #1124582