diff --git a/PKGBUILD b/PKGBUILD
index ed1d8d1..7e09aca 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -17,9 +17,11 @@ _commit='420086af84d7eaaf98ff948cd11fea2cae71734a'
 source=(
   "$pkgname::git+https://gitea.osmocom.org/sdr/rtl-sdr#commit=$_commit"
   'fix-udev-directory.patch'
+  "$pkgname.sysusers"
 )
 b2sums=('SKIP'
-        '2356582926b8bb0b1b7bbf22dd046ae9c55855a925818730d8e9558e4620f8f6599663aec50e0bdb5c1e7f1242e8f170d2f9eecb0808e42f53d06ea6a812ec64')
+        '2356582926b8bb0b1b7bbf22dd046ae9c55855a925818730d8e9558e4620f8f6599663aec50e0bdb5c1e7f1242e8f170d2f9eecb0808e42f53d06ea6a812ec64'
+        '0e50e82d207ffa74bb14ff8a6d767886ad66100a33b5fc4a28d4f0aed760247c1391f42301a308911ae07549f759c75eb19d35583de889cdf5cb05b4dc438917')
 
 pkgver() {
   cd "$pkgname"
@@ -33,10 +35,9 @@ prepare() {
   # ensure udev rules get installed to correct directory
   patch -p1 -i "$srcdir/fix-udev-directory.patch"
 
-  # fix udev rules
+  # fix udev rules and allow access only to users in rtlsdr group
   # https://bugzilla.redhat.com/show_bug.cgi?id=815093
   sed -e 's/plugdev/rtlsdr/g' -i rtl-sdr.rules
-  sed -e 's/GROUP="plugdev"/TAG+="uaccess"/' -i rtl-sdr.rules
 }
 
 build() {
@@ -55,6 +56,9 @@ build() {
 package() {
   DESTDIR="$pkgdir" cmake --install build
 
+  # rtl-sdr group
+  install -Dm 0644 $pkgname.sysusers "$pkgdir"/usr/lib/sysusers.d/$pkgname.conf
+
   cd "$pkgname"
 
   # module blacklisting rules
diff --git a/rtl-sdr.sysusers b/rtl-sdr.sysusers
new file mode 100644
index 0000000..a651193
--- /dev/null
+++ b/rtl-sdr.sysusers
@@ -0,0 +1 @@
+g rtl-sdr -