I have never done something like this (and it sounds like the wrong thing to do), but you might be able to add chmod commands to a %post script (don't forget to undo on %postun if it even works) in your rpm spec file to change permissions on installation…