diff --git a/bind.spec b/bind.spec
index e584e10..074bea4 100644
--- a/bind.spec
+++ b/bind.spec
@@ -25,7 +25,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  ISC
 Version:  9.10.4
-Release:  2%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
+Release:  3%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 Buildroot:%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -929,15 +929,17 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %{chroot_prefix}/var
 %dir %{chroot_prefix}/run
 %dir %{chroot_prefix}/var/named
-%dir %{chroot_prefix}/%{_libdir}/bind
 %ghost %config(noreplace) %{chroot_prefix}/etc/named.conf
+%defattr(-,root,root,-)
+%dir %{chroot_prefix}/usr
+%dir %{chroot_prefix}/%{_libdir}
+%dir %{chroot_prefix}/%{_libdir}/bind
 %defattr(0660,named,named,0770)
-%dir %{chroot_prefix}/run/named
 %dir %{chroot_prefix}/var/tmp
 %dir %{chroot_prefix}/var/log
+%defattr(-,named,named,-)
+%dir %{chroot_prefix}/run/named
 %{chroot_prefix}/var/run
-%dir %{chroot_prefix}/usr
-%dir %{chroot_prefix}/%{_libdir}
 
 %if %{SDB}
 %files sdb-chroot
@@ -959,15 +961,17 @@ rm -rf ${RPM_BUILD_ROOT}
 %dir %{chroot_sdb_prefix}/var
 %dir %{chroot_sdb_prefix}/run
 %dir %{chroot_sdb_prefix}/var/named
-%dir %{chroot_sdb_prefix}/%{_libdir}/bind
 %ghost %config(noreplace) %{chroot_sdb_prefix}/etc/named.conf
+%defattr(-,root,root,-)
+%dir %{chroot_sdb_prefix}/usr
+%dir %{chroot_sdb_prefix}/%{_libdir}
+%dir %{chroot_sdb_prefix}/%{_libdir}/bind
 %defattr(0660,named,named,0770)
-%dir %{chroot_sdb_prefix}/run/named
 %dir %{chroot_sdb_prefix}/var/tmp
 %dir %{chroot_sdb_prefix}/var/log
+%defattr(-,named,named,-)
+%dir %{chroot_sdb_prefix}/run/named
 %{chroot_sdb_prefix}/var/run
-%dir %{chroot_sdb_prefix}/usr
-%dir %{chroot_sdb_prefix}/%{_libdir}
 %endif
 
 %if %{PKCS11}
@@ -1002,6 +1006,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Fri Nov 11 2016 Petr Menšík <pemensik@redhat.com> - 32:9.10.4-3.P4
+- Do not change lib permissions in chroot
+
 * Thu Nov 03 2016 Petr Menšík <pemensik@redhat.com> - 32:9.10.4-2.P4
 - Update to 9.10.4-P4