diff --git a/openvpn.spec b/openvpn.spec
index 9be2b44..4d1f70c 100644
--- a/openvpn.spec
+++ b/openvpn.spec
@@ -5,7 +5,7 @@
 
 Name:              openvpn
 Version:           2.3.1
-Release:           3%{?prerelease:.%{prerelease}}%{?dist}
+Release:           4%{?prerelease:.%{prerelease}}%{?dist}
 Summary:           A full-featured SSL VPN solution
 URL:               http://openvpn.net/
 #Source0:           http://openvpn.net/beta/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.gz
@@ -127,7 +127,7 @@ rm -f %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-client \
 #install -D -m 0755 src/openvpn/%{name} $RPM_BUILD_ROOT%{_sbindir}/%{name}
 
 mkdir -p %{buildroot}%{_unitdir}
-install -D -m 0755 %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}/
+install -D -m 0644 %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}/
 rm -rf %{buildroot}%{_initrddir}
 install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}
 
@@ -203,6 +203,9 @@ fi
 %exclude %{_datadir}/doc/%{name}/
 
 %changelog
+* Thu May 16 2013 Jon Ciesla <limburgher@gmail.com> 2.3.1-4
+- chmod -x .service, BZ 963914.
+
 * Thu May 16 2013 Jon Ciesla <limburgher@gmail.com> 2.3.1-3
 - Enable --enable-pkcs11, BZ 963868.