diff --git a/ebtables.spec b/ebtables.spec
index e1a2ad0..e95521b 100644
--- a/ebtables.spec
+++ b/ebtables.spec
@@ -1,7 +1,7 @@
 
 Name:             ebtables
 Version:          2.0.11
-Release:          1
+Release:          2
 Summary:          A filtering tool for a Linux-based bridging firewall
 License:          GPLv2+
 URL:              http://ebtables.sourceforge.net/
@@ -37,7 +37,7 @@ f=THANKS; iconv -f iso-8859-1 -t utf-8 $f -o $f.utf8 ; mv $f.utf8 $f
 %install
 install -d %{buildroot}{%{_initrddir},%{_unitdir},%{_libexecdir},%{_sysconfdir}/sysconfig}
 install -p %{SOURCE3} %{buildroot}%{_unitdir}/
-install -p %{SOURCE4} %{buildroot}%{_sysconfdir}/sysconfig/ebtables-config
+install -p -D -m 600 %{SOURCE4} %{buildroot}%{_sysconfdir}/sysconfig/ebtables-config
 chmod -x %{buildroot}%{_unitdir}/*.service
 install -m0755 %{SOURCE2} %{buildroot}%{_libexecdir}/ebtables
 %make_install LIBDIR="/%{_lib}/ebtables" BINDIR="%{_sbindir}" MANDIR="%{_mandir}"
@@ -92,6 +92,12 @@ fi
 %doc %{_mandir}/man8/ebtables-legacy.8*
 
 %changelog
+* Tue Dec 08 2020 quanhongfei <quanhongfei@huawei.com> - 2.0.11-2
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:fix ebtables-config file access permission
+
 * Tue Aug 25 2020 gaihuiying <gaihuiying1@huawei.com> - 2.0.11-1
 - Type:enhancement
 - ID:NA