diff --git a/containernetworking-plugins.spec b/containernetworking-plugins.spec
index f4e6ae8185a12080df47400c4fee675a5d2b8b94..46fa8920638e9389aa2d89c483c223123b461867 100644
--- a/containernetworking-plugins.spec
+++ b/containernetworking-plugins.spec
@@ -16,7 +16,7 @@
  
 Name: %{project}-%{repo}
 Version: 1.2.0
-Release: 3
+Release: 4
 Summary: Libraries for use by writing CNI plugin
 License: ASL 2.0
 URL: https://github.com/containernetworking/plugins
@@ -201,8 +201,8 @@ cp %{_builddir}/cni %{buildroot}%{_libexecdir}/cni/
 install -d -p     %{buildroot}/%{gopath}/src/github.com/containernetworking/plugins/
  
 install -dp %{buildroot}%{_unitdir}
-install -p plugins/ipam/dhcp/systemd/cni-dhcp.service %{buildroot}%{_unitdir}
-install -p plugins/ipam/dhcp/systemd/cni-dhcp.socket %{buildroot}%{_unitdir}
+install -p -m 0644 plugins/ipam/dhcp/systemd/cni-dhcp.service %{buildroot}%{_unitdir}
+install -p -m 0644 plugins/ipam/dhcp/systemd/cni-dhcp.socket %{buildroot}%{_unitdir}
  
 # source codes for building projects
 %if 0%{?with_devel}
@@ -313,6 +313,9 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath}
 
 
 %changelog
+* Mon Jun 24 2024 wangshuo <wangshuo@kylinos.cn> - 1.2.0-4
+- change systemd unit file permission to 644
+
 * Fri Mar 1 2024 luofeng <luofeng13@huawei.com> - 1.2.0-3
 - Avoid using C ldflags with Go compiler