diff --git a/scripts/wsrep_sst_common.sh b/scripts/wsrep_sst_common.sh
old mode 100755
new mode 100644
diff --git a/scripts/wsrep_sst_rsync.sh b/scripts/wsrep_sst_rsync.sh
index 70e4a3326a17db1852e75eac6775c38d58379252..f32689a9e43a9354499ececa6f679f7528b734ba 100644
--- a/scripts/wsrep_sst_rsync.sh
+++ b/scripts/wsrep_sst_rsync.sh
@@ -368,7 +368,7 @@ EOF
 
         # first, the normal directories, so that we can detect incompatible protocol
         RC=0
-        eval rsync "'${STUNNEL:+--rsh=$STUNNEL}'" \
+        eval rsync ${STUNNEL:+--rsh=\"$STUNNEL\"} \
               --owner --group --perms --links --specials \
               --ignore-times --inplace --dirs --delete --quiet \
               $WHOLE_FILE_OPT $FILTER "'$WSREP_SST_OPT_DATA/'" \