diff --git a/openssh.spec b/openssh.spec
index 9410d73..03efef8 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -7,7 +7,7 @@
 
 Name:          openssh
 Version:       9.9p1
-Release:       2mamba
+Release:       3mamba
 Summary:       OpenSSH free Secure Shell (SSH) implementation
 Group:         Network/Security
 Vendor:        openmamba
@@ -157,7 +157,7 @@ install -d %{buildroot}%{_sysconfdir}/{ssh,pam.d}
 %makeinstall
 
 install -D -m 600 %{S:1} %{buildroot}%{_sysconfdir}/pam.d/sshd
-install -D -m 755 %{SOURCE2} %{buildroot}%{_unitdir}/sshdgenkeys.service
+install -D -m 644 %{SOURCE2} %{buildroot}%{_unitdir}/sshdgenkeys.service
 install -D -m 644 %{SOURCE3} %{buildroot}%{_unitdir}/sshd.service
 install -D -m 644 %{SOURCE4} %{buildroot}%{_unitdir}/sshd@.service
 install -D -m 644 %{SOURCE5} %{buildroot}%{_unitdir}/sshd.socket
@@ -272,6 +272,9 @@ fi
 %{_libexecdir}/openssh/ssh-askpass
 
 %changelog
+* Sat Nov 23 2024 Silvan Calarco <silvan.calarco@mambasoft.it> 9.9p1-3mamba
+- fix permissions of sshdgenkeys.service
+
 * Sat Nov 16 2024 Silvan Calarco <silvan.calarco@mambasoft.it> 9.9p1-2mamba
 - remove tmpfiles.d file duplicating /run/sshd already created by a systemd core file