diff --git a/CHANGELOG.md b/CHANGELOG.md
index a8c299e..4b4cb4d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # CHANGELOG
 
+## 0.1.1
+
+* added **shadow::filemodes** to manage group- and passwd- file mode
+
 ## 0.1.0
 
 * initial release
diff --git a/manifests/filemodes.pp b/manifests/filemodes.pp
new file mode 100644
index 0000000..1edc938
--- /dev/null
+++ b/manifests/filemodes.pp
@@ -0,0 +1,16 @@
+class shadow::filemodes() inherits shadow {
+
+  file { '/etc/group-':
+    ensure => 'present',
+    owner  => 'root',
+    group  => 'root',
+    mode   => '0600',
+  }
+
+  file { '/etc/passwd-':
+    ensure => 'present',
+    owner  => 'root',
+    group  => 'root',
+    mode   => '0600',
+  }
+}
diff --git a/metadata.json b/metadata.json
index 26f9412..6d0c4c1 100644
--- a/metadata.json
+++ b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "eyp-shadow",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "author": "eyp",
   "summary": "manages useradd and login.defs defaults",
   "license": "Apache-2.0",