diff --git a/ppp-tmpfiles.conf b/ppp-tmpfiles.conf
index 1097cbe64f718fd71ef4627d5a50e9080a158610..b2ecb111ff90761962c8cbd5314a43c8a5814e37 100644
--- a/ppp-tmpfiles.conf
+++ b/ppp-tmpfiles.conf
@@ -1 +1,2 @@
 d	/run/ppp	0755 root root
+d 	/run/pppd/lock	0755 root root
diff --git a/ppp.spec b/ppp.spec
index 9be160d21a0e7774bdb98fdbdda2f8104e945d49..0650189e7d8e6bf55fb3369cd7d3701405c566d2 100644
--- a/ppp.spec
+++ b/ppp.spec
@@ -1,6 +1,6 @@
 Name:           ppp
 Version:        2.5.0
-Release:        2
+Release:        3
 Summary:        The Point-to-Point Protocol
 
 License:        BSD and LGPLv2+ and GPLv2+ and Public Domain
@@ -71,7 +71,7 @@ cp %{SOURCE9} network-scripts
 %build
 autoreconf -fi
 export CFLAGS="%{build_cflags} -fno-strict-aliasing"
-%configure --enable-systemd --enable-cbcp --with-pam
+%configure --enable-systemd --enable-cbcp --with-pam --disable-openssl-engine
 %make_build
 %make_build -C ppp-watch LDFLAGS="%{?build_ldflags} -pie"
 
@@ -100,6 +100,7 @@ install -m 644 -p %{SOURCE12} %{buildroot}%{_prefix}/lib/tmpfiles.d/ppp.conf
 
 #ghosts
 mkdir -p %{buildroot}%{_rundir}/ppp
+mkdir -p %{buildroot}%{_rundir}/pppd/lock
 
 %pre
 /usr/bin/getent group dip >/dev/null 2>&1 || /usr/sbin/groupadd -r -g 40 dip >/dev/null 2>&1 || :
@@ -123,6 +124,8 @@ mkdir -p %{buildroot}%{_rundir}/ppp
 %{_sbindir}/chat
 %{_sbindir}/ppp*
 %ghost %dir %{_rundir}/ppp
+%ghost %dir %{_rundir}/pppd
+%ghost %dir %{_rundir}/pppd/lock
 %attr(700, root, root) %dir %{_localstatedir}/log/ppp
 
 %files devel
@@ -135,6 +138,13 @@ mkdir -p %{buildroot}%{_rundir}/ppp
 %{_mandir}/man8/*.8.gz
 
 %changelog
+* Mon Aug 05 2024 gaihuiying <eaglegai@163.com> - 2.5.0-3
+- Type:bugfix
+- CVE:NA
+- SUG:NA
+- DESC:pre-created upstream default lock dir
+       Openssl engine API is deprecated for a while thus disable it
+
 * Fri May 10 2024 gaihuiying <eaglegai@163.com> - 2.5.0-2
 - Type:bugfix
 - CVE:NA