diff --git a/openstack-swift.spec b/openstack-swift.spec
index 442faf3..1026c84 100644
--- a/openstack-swift.spec
+++ b/openstack-swift.spec
@@ -350,7 +350,7 @@ exit 0
 %{_mandir}/man1/swift-ring-builder.1*
 %config(noreplace) %{_sysconfdir}/tmpfiles.d/openstack-swift.conf
 %dir %{_sysconfdir}/swift
-%config(noreplace) %attr(660, root, swift) %{_sysconfdir}/swift/swift.conf
+%config(noreplace) %attr(640, root, swift) %{_sysconfdir}/swift/swift.conf
 %dir %attr(0755, swift, root) %{_localstatedir}/run/swift
 %dir %attr(0755, swift, root) %{_localstatedir}/cache/swift
 %dir %attr(0755, swift, root) %{_sharedstatedir}/swift
@@ -386,7 +386,7 @@ exit 0
 %{_mandir}/man1/swift-account-server.1*
 %{_unitdir}/%{name}-account*.service
 %dir %{_sysconfdir}/swift/account-server
-%config(noreplace) %attr(660, root, swift) %{_sysconfdir}/swift/account-server.conf
+%config(noreplace) %attr(640, root, swift) %{_sysconfdir}/swift/account-server.conf
 %dir %attr(0755, swift, root) %{_localstatedir}/run/swift/account-server
 %{_bindir}/swift-account-auditor
 %{_bindir}/swift-account-reaper
@@ -404,7 +404,7 @@ exit 0
 %{_mandir}/man1/swift-container-updater.1*
 %{_unitdir}/%{name}-container*.service
 %dir %{_sysconfdir}/swift/container-server
-%config(noreplace) %attr(660, root, swift) %{_sysconfdir}/swift/container-server.conf
+%config(noreplace) %attr(640, root, swift) %{_sysconfdir}/swift/container-server.conf
 %dir %attr(0755, swift, root) %{_localstatedir}/run/swift/container-server
 %{_bindir}/swift-container-auditor
 %{_bindir}/swift-container-server
@@ -431,7 +431,7 @@ exit 0
 %{_unitdir}/%{name}-object-updater.service
 %{_unitdir}/%{name}-object-updater@.service
 %dir %{_sysconfdir}/swift/object-server
-%config(noreplace) %attr(660, root, swift) %{_sysconfdir}/swift/object-server.conf
+%config(noreplace) %attr(640, root, swift) %{_sysconfdir}/swift/object-server.conf
 %dir %attr(0755, swift, root) %{_localstatedir}/run/swift/object-server
 %{_bindir}/swift-object-auditor
 %{_bindir}/swift-object-info
@@ -449,8 +449,8 @@ exit 0
 %{_unitdir}/%{name}-object-expirer.service
 %{_unitdir}/%{name}-proxy.service
 %dir %{_sysconfdir}/swift/proxy-server
-%config(noreplace) %attr(660, root, swift) %{_sysconfdir}/swift/proxy-server.conf
-%config(noreplace) %attr(660, root, swift) %{_sysconfdir}/swift/object-expirer.conf
+%config(noreplace) %attr(640, root, swift) %{_sysconfdir}/swift/proxy-server.conf
+%config(noreplace) %attr(640, root, swift) %{_sysconfdir}/swift/object-expirer.conf
 %dir %attr(0755, swift, root) %{_localstatedir}/run/swift/proxy-server
 %{_bindir}/swift-object-expirer
 %{_bindir}/swift-proxy-server