diff --git a/debian/changelog b/debian/changelog
index dddfd0399..448bc28c3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+keystone (2:10.0.0-2) UNRELEASED; urgency=medium
+
+  * Fixed unix right of /var/log/keystone (Closes: #840221).
+
+ -- Thomas Goirand <zigo@debian.org>  Mon, 10 Oct 2016 11:53:43 +0200
+
 keystone (2:10.0.0-1) unstable; urgency=medium
 
   * New upstream release.
diff --git a/debian/keystone.postinst.in b/debian/keystone.postinst.in
index d4daaf576..652b442c0 100644
--- a/debian/keystone.postinst.in
+++ b/debian/keystone.postinst.in
@@ -155,6 +155,8 @@ if [ "$1" = "configure" ] ; then
 #		pkgos_init ${k}
 #	done
 
+	chown keystone:adm /var/log/keystone
+
 	a2enmod wsgi || true
 	a2ensite wsgi-keystone.conf || true
 	invoke-rc.d apache2 restart || true