diff --git a/.gitignore b/.gitignore
index abe2f09..6ffa6bc 100644
--- a/.gitignore
+++ b/.gitignore
@@ -151,3 +151,4 @@ audit-2.0.4.tar.gz
 /audit-2.7.6.tar.gz
 /audit-2.7.7.tar.gz
 /audit-2.7.8.tar.gz
+/audit-2.8.tar.gz
diff --git a/audit.spec b/audit.spec
index 240dcdb..2f03cdd 100644
--- a/audit.spec
+++ b/audit.spec
@@ -2,7 +2,7 @@
 
 Summary: User space tools for 2.6 kernel auditing
 Name: audit
-Version: 2.7.8
+Version: 2.8
 Release: 1%{?dist}
 License: GPLv2+
 Group: System Environment/Daemons
@@ -131,7 +131,7 @@ mkdir -p $RPM_BUILD_ROOT/{sbin,etc/audispd/plugins.d,etc/audit/rules.d}
 mkdir -p $RPM_BUILD_ROOT/%{_mandir}/{man5,man8}
 mkdir -p $RPM_BUILD_ROOT/%{_lib}
 mkdir -p $RPM_BUILD_ROOT/%{_libdir}/audit
-mkdir -p $RPM_BUILD_ROOT/%{_var}/log/audit
+mkdir -p --mode=0700 $RPM_BUILD_ROOT/%{_var}/log/audit
 mkdir -p $RPM_BUILD_ROOT/%{_var}/spool/audit
 make DESTDIR=$RPM_BUILD_ROOT install
 
@@ -264,8 +264,8 @@ fi
 %attr(755,root,root) /sbin/ausearch
 %attr(755,root,root) /sbin/aureport
 %attr(750,root,root) /sbin/autrace
-%attr(750,root,root) /sbin/audispd
-%attr(750,root,root) /sbin/augenrules
+%attr(755,root,root) /sbin/audispd
+%attr(755,root,root) /sbin/augenrules
 %attr(755,root,root) %{_bindir}/aulast
 %attr(755,root,root) %{_bindir}/aulastlog
 %attr(755,root,root) %{_bindir}/ausyscall
@@ -308,6 +308,9 @@ fi
 %attr(750,root,root) /sbin/audispd-zos-remote
 
 %changelog
+* Tue Oct 10 2017 Steve Grubb <sgrubb@redhat.com> 2.8-1
+- New upstream feature release
+
 * Mon Sep 18 2017 Steve Grubb <sgrubb@redhat.com> 2.7.8-1
 - New upstream bugfix release
 
diff --git a/sources b/sources
index 448ee26..a8678c6 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (audit-2.7.8.tar.gz) = 904dadd596d47a95e7f3d7071cff6e307ee3e5e5f06fe0a49264eac5afdef50e92f8926182315685f4836fb361ece4343abc0fd4e63a0085c1a541c7188ca194
+SHA512 (audit-2.8.tar.gz) = 5a5f827141620144794bdf071a15a272a4f7b2eb13eb67d32b7f208e2799479ad25db0566c14ef06265439e022ea8787ad7d29cd6ccf411f50139de81fd6bc79