-%dir %{_sysconfdir}/easy-rsa
-%attr(750,root,root) %dir %{_sysconfdir}/easy-rsa/keys
-%attr(750,root,root) %dir %{_sysconfdir}/easy-rsa/x509-types
-%attr(640,root,root) %dir %{_sysconfdir}/easy-rsa/x509-types/COMMON
-%attr(640,root,root) %dir %{_sysconfdir}/easy-rsa/x509-types/ca
-%attr(640,root,root) %dir %{_sysconfdir}/easy-rsa/x509-types/client
-%attr(640,root,root) %dir %{_sysconfdir}/easy-rsa/x509-types/code-signing
-%attr(640,root,root) %dir %{_sysconfdir}/easy-rsa/x509-types/server
-%config(noreplace) %attr(640,root,root) %verify(not md5 mtime size) %{_sysconfdir}/easy-rsa/vars
-%config(noreplace) %attr(640,root,root) %verify(not md5 mtime size) %{_sysconfdir}/easy-rsa/openssl-easyrsa.cnf
-%attr(750,root,root) %{_sbindir}/easyrsa
+%dir %{_datadir}/easy-rsa
+%attr(755,root,root) %{_datadir}/easy-rsa/easyrsa
+%{_datadir}/easy-rsa/openssl-easyrsa.cnf
+%{_datadir}/easy-rsa/vars.example
+%{_datadir}/easy-rsa/x509-types