diff --git a/smeserver-affa.spec b/smeserver-affa.spec
index b149ba1..e3d0610 100644
--- a/smeserver-affa.spec
+++ b/smeserver-affa.spec
@@ -2,7 +2,7 @@ Summary: A rsync-based backup program for linux, adapted to Koozali SME server 1
 %define name smeserver-affa
 Name: %{name}
 %define version 4.0
-%define release 4
+%define release 5
 Version: %{version}
 Release: %{release}%{?dist}
 Vendor: Michael Weinberger <mweinber AT users DOT sourceforge DOT net> //// adaptation to sme-server Arnaud Guillaume <smeserver-affa AT guedel DOT eu>
@@ -78,6 +78,7 @@ rm -f $RPM_BUILD_ROOT/sbin/affa.tmp
     --ignoredir "/etc/profile.d" \
     --file "/etc/profile.d/affa.sh" "attr(0555,root,root)" \
     --file "/etc/sudoers.d/affa" "attr(0440,root,root)" \
+    --file "/usr/sbin/affa" "attr(0744,root,root)" \
     > %{name}-%{version}-filelist
 
 # We could use this for docs I guess - we should standardise this sort of thing
@@ -104,6 +105,9 @@ exit 0
 exit 0
 
 %changelog
+* Thu Feb 20 2025 John Crisp <jcrisp@safeandsoundit.co.uk> 4.0-5.sme
+- Set affa permissions [SME:12922]
+
 * Wed Sep 11 2024 Brian Read <brianr@koozali.org> 4.0-4.sme
 - Update requires to use smeserver- packages
 
@@ -114,7 +118,6 @@ exit 0
 - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
   by assuming the date is correct and changing the weekday.
 
-
 * Mon Sep 09 2024 John Crisp <jcrisp@safeandsoundit.co.uk> 4.0-2.sme
 - Various fixes for rise