diff --git a/debian/changelog b/debian/changelog
index 63cd03e..39d91b5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,7 +6,11 @@ shim (15.8-2) UNRELEASED; urgency=medium
   [ Niels Thykier ]
   * Build without requiring root. Closes: #1089432
 
- -- Steve McIntyre <93sam@debian.org>  Sat, 04 Jan 2025 17:57:35 +0000
+  [ Steve McIntyre ]
+  * Also make the rules-requires-root changes in the templates for our
+    generated packages. Closes: #1092425
+
+ -- Steve McIntyre <93sam@debian.org>  Wed, 08 Jan 2025 23:17:25 +0000
 
 shim (15.8-1+pmx1) bookworm; urgency=medium
 
diff --git a/debian/signing-template/control.in b/debian/signing-template/control.in
index eb73c60..1d63922 100644
--- a/debian/signing-template/control.in
+++ b/debian/signing-template/control.in
@@ -2,6 +2,7 @@ Source: shim-helpers-@arch@-signed
 Section: admin
 Priority: optional
 Maintainer: Proxmox Support Team <support@proxmox.com>
+Rules-Requires-Root: no
 Standards-Version: 4.3.0
 Build-Depends: debhelper (>= 10.1~),
  sbsigntool [amd64 arm64 i386],
diff --git a/debian/signing-template/rules b/debian/signing-template/rules
index a972e7d..f034f83 100755
--- a/debian/signing-template/rules
+++ b/debian/signing-template/rules
@@ -9,8 +9,8 @@ override_dh_auto_install:
 	set -e ; \
 	find "$(SIG_DIR)" -name '*.sig' -printf '%P\n' | \
 	while read sig; do \
-		install -o 0 -g 0 -m 0755 -d "debian/tmp/$${sig%/*}" ; \
-		install -o 0 -g 0 -m 0644 "/$${sig%.sig}" "debian/tmp/$${sig}ned" ; \
+		install -m 0755 -d "debian/tmp/$${sig%/*}" ; \
+		install -m 0644 "/$${sig%.sig}" "debian/tmp/$${sig}ned" ; \
 		sbattach --attach "$(SIG_DIR)/$$sig" "debian/tmp/$${sig}ned" ; \
 	done