diff --git a/unbound.spec b/unbound.spec
index dc33a09fe7936a37668e677fa767013a968f6409..9570de9fd579ced0c378fce8b144a6756b00331e 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -3,7 +3,7 @@
 
 Name:          unbound
 Version:       1.7.3
-Release:       11
+Release:       12
 Summary:       Unbound is a validating, recursive, caching DNS resolver
 License:       BSD
 Url:           https://nlnetlabs.nl/projects/unbound/about/
@@ -174,13 +174,17 @@ popd
 
 
 %files
+%defattr(-,root,root)
 %doc doc/CREDITS doc/FEATURES doc/README doc/LICENSE
 %attr(0644,root,root) %{_tmpfilesdir}/unbound.conf
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/%{name}/unbound.conf
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/%{name}
 %attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
+%dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/keys.d
 %attr(0644,root,unbound) %config(noreplace) %{_sysconfdir}/%{name}/keys.d/*.key
+%dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/conf.d
 %attr(0644,root,unbound) %config(noreplace) %{_sysconfdir}/%{name}/conf.d/*.conf
+%dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/local.d
 %attr(0644,root,unbound) %config(noreplace) %{_sysconfdir}/%{name}/local.d/*.conf
 %attr(0644,unbound,unbound) %config %{_sharedstatedir}/%{name}/root.key
 %{_sysconfdir}/%{name}/icannbundle.pem
@@ -193,19 +197,27 @@ popd
 %{_sbindir}/*
 
 %files -n python3-unbound
+%defattr(-,root,root)
 %doc pythonmod/examples/* libunbound/python/examples/* pythonmod/LICENSE
 %{python3_sitearch}/*
 
 %files devel
+%defattr(-,root,root)
 %{_libdir}/libunbound.so
 %{_libdir}/pkgconfig/*.pc
 %{_includedir}/*
 
 %files help
+%defattr(-,root,root)
 %{_mandir}/man*
 
-
 %changelog
+* Tue Dec 24 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.7.3-12
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:change the jurisdiction for some path of files
+
 * Wed Nov 20 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.7.3-11
 - Type: enhancement
 - ID:   NA