diff --git a/krb5.spec b/krb5.spec
index 61366004bb02aa21fb6e96a271b7013be9fdf338..d45651b7d013f08348f4dab2e0214c13072a759b 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -2,7 +2,7 @@
 
 Name:     krb5
 Version:  1.17
-Release:  5
+Release:  6
 Summary:  The Kerberos network authentication protocol
 License:  MIT
 URL:      http://web.mit.edu/kerberos/www/
@@ -173,8 +173,9 @@ rm -vf %{buildroot}/%{_sbindir}/krb5-send-pr
 rm -vrf %{buildroot}/%{_datadir}/examples
 rm -vf %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
 
-%find_lang mit-krb5
+find %buildroot -type f \( -name '*.so' -o -name '*.so.*' \) -exec chmod 755 {} +
 
+%find_lang mit-krb5
 
 %check
 make -C src runenv.py
@@ -195,7 +196,7 @@ make -C src check || :
 %systemd_postun_with_restart krb5kdc.service kadmin.service kprop.service
 
 %files -f mit-krb5.lang
-%defattr(-,root,root)
+%defattr(-,root,root,-)
 %doc NOTICE README
 %dir /etc/gss
 %dir /etc/gss/mech.d
@@ -213,7 +214,7 @@ make -C src check || :
 %{_libdir}/libkadm5srv_mit.so.*
 
 %files server
-%defattr(-,root,root)
+%defattr(-,root,root,-)
 %{_unitdir}/krb5kdc.service
 %{_unitdir}/kadmin.service
 %{_unitdir}/kprop.service
@@ -254,7 +255,7 @@ make -C src check || :
 %{_sbindir}/sserver
 
 %files client
-%defattr(-,root,root)
+%defattr(-,root,root,-)
 %config(noreplace) /etc/pam.d/ksu
 %{_bindir}/kdestroy
 %{_bindir}/kinit
@@ -268,7 +269,7 @@ make -C src check || :
 %attr(4755,root,root) %{_bindir}/ksu
 
 %files devel
-%defattr(-,root,root)
+%defattr(-,root,root,-)
 %{_includedir}/*
 %{_libdir}/{libgssapi_krb5.so,libgssrpc.so,libk5crypto.so,libkdb5.so,libkrad.so,libkrb5.so,libkrb5support.so}
 %{_libdir}/pkgconfig/*
@@ -285,7 +286,7 @@ make -C src check || :
 %{_sbindir}/uuserver
 
 %files help
-%defattr(-,root,root)
+%defattr(-,root,root,-)
 %{_mandir}/man1/*
 %{_mandir}/man5/*
 %{_mandir}/man5/{.k5identity.5.*,.k5login.5.*}
@@ -293,6 +294,9 @@ make -C src check || :
 %{_mandir}/man8/*
 
 %changelog
+* Tue Jan 14 2020 openEuler Buildteam <buildteam@openeuler.org> - 1.17-6
+- fix the permission problem
+
 * Fri Nov 15 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.17-5
 - delete unused patch