diff --git a/CHANGES.txt b/CHANGES.txt
index 6e1ca85140..e17093df62 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,5 +1,6 @@
 2.1.20
  * More PEP8 compliance for cqlsh (CASSANDRA-14021)
+ * RPM package spec: fix permissions for installed jars and config files (CASSANDRA-14181)
 
 2.1.19
  * Add storage port options to sstableloader (CASSANDRA-13844)
diff --git a/redhat/cassandra.spec b/redhat/cassandra.spec
index 05f1b0bfe3..a3f09b0fb6 100644
--- a/redhat/cassandra.spec
+++ b/redhat/cassandra.spec
@@ -126,10 +126,10 @@ exit 0
 %attr(755,root,root) %{_bindir}/stop-server
 %attr(755,root,root) %{_sbindir}/cassandra
 %attr(755,root,root) /%{_sysconfdir}/rc.d/init.d/%{username}
-%attr(755,root,root) /%{_sysconfdir}/default/%{username}
-%attr(755,root,root) /%{_sysconfdir}/security/limits.d/%{username}.conf
-%attr(755,root,root) /usr/share/%{username}*
-%attr(755,root,root) %config(noreplace) /%{_sysconfdir}/%{username}
+%{_sysconfdir}/default/%{username}
+%{_sysconfdir}/security/limits.d/%{username}.conf
+/usr/share/%{username}*
+%config(noreplace) /%{_sysconfdir}/%{username}
 %attr(755,%{username},%{username}) %config(noreplace) /var/lib/%{username}/*
 %attr(755,%{username},%{username}) /var/log/%{username}*
 %attr(755,%{username},%{username}) /var/run/%{username}*