diff --git a/rsync.spec b/rsync.spec
index bb0cefa2d267eae34fb7488ce53a3e20273b8203..015c6bf8029d071de3ab3816d58916577aa00e1b 100644
--- a/rsync.spec
+++ b/rsync.spec
@@ -1,6 +1,6 @@
 Name:           rsync
 Version:        3.2.3
-Release:        4
+Release:        5
 Summary:        Fast incremental file transfer utility
 License:        GPLv3+
 URL:            http://rsync.samba.org/
@@ -44,7 +44,6 @@ patch -p1 -i patches/copy-devices.diff
 
 %check
 make check
-chmod -x support/*
 
 %install
 %make_install
@@ -69,7 +68,7 @@ install -D -m644 %{SOURCE6} %{buildroot}/%{_unitdir}/rsyncd@.service
 %files
 %defattr(-,root,root)
 %doc tech_report.tex
-%doc support/*
+%attr(0644,root,root) %doc support/*
 %license COPYING
 %config(noreplace) %{_sysconfdir}/*.conf
 %config(noreplace) %{_sysconfdir}/sysconfig/rsyncd
@@ -83,6 +82,12 @@ install -D -m644 %{SOURCE6} %{buildroot}/%{_unitdir}/rsyncd@.service
 %{_mandir}/man5/rsyncd.conf.5*
 
 %changelog
+* Thu Jun 15 2023 zhoupengcheng <zhoupengcheng11@huawei.com> - 3.2.3-5
+- Type:bugfix
+- CVE:
+- SUG:NA
+- DESC:Restrict the doc permission in rsync to 644.
+
 * Fri Aug 26 2022 panxiaohe <panxh.life@foxmail.com> - 3.2.3-4
 - fix CVE-2022-29154