diff --git a/x11-misc/slock/slock-1.6.ebuild b/x11-misc/slock/slock-1.6.ebuild
index 7070e3367b4c..7a1c1c5a3da4 100644
--- a/x11-misc/slock/slock-1.6.ebuild
+++ b/x11-misc/slock/slock-1.6.ebuild
@@ -43,6 +43,7 @@ src_prepare() {
 
 src_install() {
 	dobin slock
+	fperms u+s /usr/bin/slock
 	doman slock.1
 	save_config config.h
 }
@@ -51,9 +52,9 @@ pkg_postinst() {
 	# cap_dac_read_search used to be enough for shadow access
 	# but now slock wants to write to /proc/self/oom_score_adj
 	# and for that it needs:
-	fcaps -m u+s \
+	fcaps -M u-s \
 		cap_dac_override,cap_setgid,cap_setuid,cap_sys_resource \
-		/usr/bin/slock
+		usr/bin/slock
 
 	savedconfig_pkg_postinst
 }