diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 75447292fe..0bd95c226a 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -50,6 +50,9 @@
         <listitem>
           <para>[dj] - Added Python dependency for xcb-proto.</para>
         </listitem>
+        <listitem>
+          <para>[dj] - Corrected permissions of nss headers.</para>
+        </listitem>
       </itemizedlist>
     </listitem>
 
diff --git a/postlfs/security/nss.xml b/postlfs/security/nss.xml
index 95ec43c71e..56a0d103ca 100644
--- a/postlfs/security/nss.xml
+++ b/postlfs/security/nss.xml
@@ -130,7 +130,8 @@ install -v -m644 $NSS_LINUXDIR/lib/{*.chk,libcrmf.a} /usr/lib &amp;&amp;
 install -v -m755 -d /usr/include/nss &amp;&amp;
 install -v -m755 $NSS_LINUXDIR/bin/nss-config /usr/bin &amp;&amp;
 install -v -m644 $NSS_LINUXDIR/lib/pkgconfig/nss.pc /usr/lib/pkgconfig &amp;&amp;
-cp -v -RL {public,private}/nss/* /usr/include/nss</userinput></screen>
+cp -v -RL {public,private}/nss/* /usr/include/nss &amp;&amp;
+chmod 644 /usr/include/nss/*</userinput></screen>
 
     <para>Now as the unprivileged user, exit the <command>bash</command>
     shell started at the beginning of the installation to restore the