diff --git a/openssh.spec b/openssh.spec
index 43eefdf..f71dae9 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -51,7 +51,7 @@
 
 # Do not forget to bump pam_ssh_agent_auth release if you rewind the main package release to 1
 %global openssh_ver 8.6p1
-%global openssh_rel 3
+%global openssh_rel 4
 %global pam_ssh_agent_ver 0.10.4
 %global pam_ssh_agent_rel 3
 
@@ -659,6 +659,9 @@ test -f %{sysconfig_anaconda} && \
 %endif
 
 %changelog
+* Tue Jun 01 2021 Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.6p1-4
+- rebuilt
+
 * Fri May 21 2021 Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.6p1-3
 - Hostbased ssh authentication fails if session ID contains a '/' (#1963058)
 
diff --git a/rpminspect.yaml b/rpminspect.yaml
new file mode 100644
index 0000000..03946bd
--- /dev/null
+++ b/rpminspect.yaml
@@ -0,0 +1,11 @@
+# https://one.redhat.com/rhel-developer-guide/#_modifying_a_per_package_rpminspect_yaml_file
+# https://github.com/rpminspect/rpminspect/blob/master/data/generic.yaml
+badfuncs:
+    # Optional list of glob(7) specifications to match files to ignore
+    # for this inspection.  The format of this list is the same as the
+    # global 'ignore' list.  The difference is the items specified
+    # here will only be used during this inspection.
+    ignore:
+        - /usr/bin/ssh
+        - /usr/sbin/sshd
+