diff --git a/debian/freeipa-server-trust-ad.lintian-errors b/debian/freeipa-server-trust-ad.lintian-overrides
similarity index 100%
rename from debian/freeipa-server-trust-ad.lintian-errors
rename to debian/freeipa-server-trust-ad.lintian-overrides
diff --git a/debian/freeipa-server.install b/debian/freeipa-server.install
index 9599d703f..ceb2df199 100644
--- a/debian/freeipa-server.install
+++ b/debian/freeipa-server.install
@@ -91,4 +91,7 @@ usr/share/man/man1/ipa-server-certinstall.1*
 usr/share/man/man1/ipa-server-install.1*
 usr/share/man/man8/ipa-upgradeconfig.8*
 usr/share/man/man8/ipactl.8*
+var/lib/ipa/backup
+var/lib/ipa/pki-ca
 var/lib/ipa/sysrestore
+var/lib/ipa/sysupgrade
diff --git a/debian/rules b/debian/rules
index b159e06ea..5cdf04e52 100755
--- a/debian/rules
+++ b/debian/rules
@@ -70,6 +70,8 @@ ifneq ($(ONLY_CLIENT), 1)
 		$(DESTDIR)/usr/share/ipa/ui/js/libs/jquery.js
 	ln -s /usr/share/javascript/dojo/dojo.js $(DESTDIR)/usr/share/ipa/ui/js/dojo/dojo.js
 	ln -s /usr/share/javascript/jquery/jquery.js $(DESTDIR)/usr/share/ipa/ui/js/libs/jquery.js
+
+	mkdir -m 700 $(DESTDIR)/var/lib/ipa/backup
 else
 	make $(PLATFORM) IPA_VERSION_IS_GIT_SNAPSHOT=no client-install DESTDIR=$(DESTDIR)
 endif