diff --git a/extra/simplesamlphp.spec b/extra/simplesamlphp.spec
index 0448e4bafb47ad300b0685c88e6b70736f97665d..8ca7df61bfb0a0b966faa6fc58be17166e6718a9 100644
--- a/extra/simplesamlphp.spec
+++ b/extra/simplesamlphp.spec
@@ -58,8 +58,8 @@ tar cf - . | (cd %{buildroot}%{_prefix}simplesamlphp; tar xfp -)
 # keep the labels, as uninstall + restorecon
 # may result in admin revealing sensitive data by mistake.
 #    semanage fcontext -d -t httpd_sys_content_t '/var/lib/simplesamlphp(/.*)?'
-#    semanage fcontext -a -t httpd_sys_rw_content_t '/var/lib/simplesamlphp/data(/.*)?'
-#    semanage fcontext -a -t httpd_sys_rw_content_t '/var/lib/simplesamlphp/log(/.*)?'
+#    semanage fcontext -d -t httpd_sys_rw_content_t '/var/lib/simplesamlphp/data(/.*)?'
+#    semanage fcontext -d -t httpd_sys_rw_content_t '/var/lib/simplesamlphp/log(/.*)?'
 
 %preun