diff --git a/src/etc/changelist b/src/etc/changelist
index a795ab31..4d380850 100644
--- a/src/etc/changelist
+++ b/src/etc/changelist
@@ -1,4 +1,4 @@
-#	$OpenBSD: changelist,v 1.106 2015/07/07 14:13:01 ajacoutot Exp $
+#	$OpenBSD: changelist,v 1.107 2015/07/23 14:49:10 sthen Exp $
 #
 # List of files which the security script backs up and checks
 # for modifications.
@@ -26,6 +26,7 @@
 /etc/dhcpd.conf
 /etc/disktab
 /etc/distfile
+/etc/doas.conf
 /etc/dvmrpd.conf
 /etc/ethers
 /etc/exports
diff --git a/src/etc/mtree/special b/src/etc/mtree/special
index 61b5c86f..6061c52d 100644
--- a/src/etc/mtree/special
+++ b/src/etc/mtree/special
@@ -1,4 +1,4 @@
-#	$OpenBSD: special,v 1.113 2015/07/03 22:05:53 millert Exp $
+#	$OpenBSD: special,v 1.114 2015/07/23 14:49:10 sthen Exp $
 #
 # Hand-crafted mtree specification for the dangerous files.
 #
@@ -22,6 +22,7 @@ csh.logout	type=file mode=0644 uname=root gname=wheel
 daily		type=file mode=0644 uname=root gname=wheel
 daily.local	type=file mode=0644 uname=root gname=wheel optional
 dhcpd.conf	type=file mode=0644 uname=root gname=wheel optional
+doas.conf	type=file mode=0640 uname=root gname=wheel optional
 dvmrpd.conf	type=file mode=0600 uname=root gname=wheel optional
 exports		type=file mode=0644 uname=root gname=wheel optional
 fbtab		type=file mode=0644 uname=root gname=wheel