diff --git a/polkit.spec b/polkit.spec
index 8dfcc3cc288817b2dc6e4ece474548829fb24cf5..8805fbf342174bd05bbda72e7d0b2f7434c662af 100644
--- a/polkit.spec
+++ b/polkit.spec
@@ -1,6 +1,6 @@
 Name:             polkit
 Version:          125
-Release:          1
+Release:          2
 Summary:          Define and Handle authorizations tool
 License:          LGPL-2.0-or-later
 URL:              https://polkit.pages.freedesktop.org/polkit/
@@ -97,11 +97,11 @@ exit 0
 %{_unitdir}/polkit.service
 %dir %{_datadir}/polkit-1/
 %dir %{_datadir}/polkit-1/actions
-%attr(0700,polkitd,root) %dir %{_datadir}/polkit-1/rules.d
+%attr(0700,root,polkitd) %dir %{_datadir}/polkit-1/rules.d
 %{_datadir}/polkit-1/actions/org.freedesktop.policykit.policy
 %{_datadir}/polkit-1/policyconfig-1.dtd
 %{_datadir}/polkit-1/rules.d/50-default.rules
-%attr(0700,polkitd,root) %dir %{_sysconfdir}/polkit-1/rules.d
+%attr(0700,root,polkitd) %dir %{_sysconfdir}/polkit-1/rules.d
 %{_bindir}/pkaction
 %{_bindir}/pkcheck
 %{_bindir}/pkttyagent
@@ -132,6 +132,9 @@ exit 0
 %{_mandir}/man?/*
 
 %changelog
+* Mon Feb 10 2025 xuraoqing <xuraoqing@huawei.com> - 125-2
+- change config file permission to increase security of polkitd
+
 * Wed Aug 21 2024 Funda Wang <fundawang@yeah.net> - 125-1
 - update to 125