diff --git a/policycoreutils.spec b/policycoreutils.spec
index 5e55584..780c8ee 100644
--- a/policycoreutils.spec
+++ b/policycoreutils.spec
@@ -192,7 +192,7 @@ or level of a logged in user.
 
 %files newrole
 %defattr(-,root,root)
-%attr(4755,root,root) %{_bindir}/newrole
+%attr(0755,root,root) %caps(cap_audit_write,cap_setuid) %{_bindir}/newrole
 %{_mandir}/man1/newrole.1.gz
 
 %package gui
@@ -238,7 +238,7 @@ rm -rf %{buildroot}
 /sbin/fixfiles
 /sbin/setfiles
 /sbin/load_policy
-%{_sbindir}/seunshare
+%attr(0755,root,root) %caps(cap_setuid,cap_dac_override,cap_sys_admin,cap_sys_nice) %{_sbindir}/seunshare
 %{_sbindir}/genhomedircon
 %{_sbindir}/load_policy
 %{_sbindir}/restorecond