diff --git a/Kmesh.spec b/Kmesh.spec
index bd4bb6b59b423b63819134ce473542f5f9935acb..ef01f7c67539291e3793c90e5befafa5234a343f 100644
--- a/Kmesh.spec
+++ b/Kmesh.spec
@@ -1,7 +1,7 @@
 %global codepath kmesh
 Name:          Kmesh
 Version:       0.4.1
-Release:       1
+Release:       2
 Summary:       %{name} is a eBPF-based service mesh kernel solution
 License:       ASL 2.0 and GPL-2.0
 URL:           https://github.com/kmesh-net
@@ -42,14 +42,14 @@ go mod tidy
 %install
 mkdir -p %{buildroot}%{_bindir}
 install %{_builddir}/%{codepath}-%{version}/kmesh-daemon %{buildroot}%{_bindir}
-install %{_builddir}/%{codepath}-%{version}/kmesh-cni %{buildroot}%{_bindir}
+install -Dpm 0400 %{_builddir}/%{codepath}-%{version}/kmesh-cni %{buildroot}%{_bindir}
 install %{_builddir}/%{codepath}-%{version}/build/kmesh-start-pre.sh %{buildroot}%{_bindir}
 install %{_builddir}/%{codepath}-%{version}/build/kmesh-stop-post.sh %{buildroot}%{_bindir}
 install %{_builddir}/%{codepath}-%{version}/oncn-mda/deploy/mdacore %{buildroot}%{_bindir}
 
 mkdir -p %{buildroot}%{_datarootdir}/oncn-mda
-install %{_builddir}/%{codepath}-%{version}/oncn-mda/build/ebpf_src/CMakeFiles/sock_ops.dir/sock_ops.c.o %{buildroot}%{_datarootdir}/oncn-mda
-install %{_builddir}/%{codepath}-%{version}/oncn-mda/build/ebpf_src/CMakeFiles/sock_redirect.dir/sock_redirect.c.o %{buildroot}%{_datarootdir}/oncn-mda
+install -Dpm 0400 %{_builddir}/%{codepath}-%{version}/oncn-mda/build/ebpf_src/CMakeFiles/sock_ops.dir/sock_ops.c.o %{buildroot}%{_datarootdir}/oncn-mda
+install -Dpm 0400 %{_builddir}/%{codepath}-%{version}/oncn-mda/build/ebpf_src/CMakeFiles/sock_redirect.dir/sock_redirect.c.o %{buildroot}%{_datarootdir}/oncn-mda
 
 mkdir -p %{buildroot}/kmesh
 install %{_builddir}/%{codepath}-%{version}/build/docker/start_kmesh.sh %{buildroot}/kmesh
@@ -109,9 +109,9 @@ rm -rf %{buildroot}
 %attr(0500,root,root) /usr/lib64/libkmesh_deserial.so
 %attr(0500,root,root) /usr/lib64/libkmesh_api_v2_c.so
 
-%attr(0500,root,root) %dir /usr/share/oncn-mda
-%attr(0500,root,root) /usr/share/oncn-mda/sock_ops.c.o
-%attr(0500,root,root) /usr/share/oncn-mda/sock_redirect.c.o
+%attr(0400,root,root) %dir /usr/share/oncn-mda
+%attr(0400,root,root) /usr/share/oncn-mda/sock_ops.c.o
+%attr(0400,root,root) /usr/share/oncn-mda/sock_redirect.c.o
 
 %attr(0700,root,root) %dir %{_sysconfdir}/oncn-mda
 %config(noreplace) %attr(0600,root,root) %{_sysconfdir}/oncn-mda/oncn-mda.conf
@@ -121,6 +121,9 @@ rm -rf %{buildroot}
 %attr(0500,root,root) /kmesh/start_kmesh.sh
 
 %changelog
+* Tue Dec 17 2024 weli-l<1289113577@qq.com> - 0.4.1-2
+- modify ebpf prog permissions
+
 * Mon Sep 02 2024 weli-l<1289113577@qq.com> - 0.4.1-1
 - init Kmesh 0.4.1