diff --git a/meta-openeuler/recipes-core/bind/bind_9.11.14.bb b/meta-openeuler/recipes-core/bind/bind_9.11.14.bb
index 8b336ef74832ccf2712a1b8c3d85c4ddf028d05f..027035d6137c8cab6bf0ce369bc3c22474de6f52 100644
--- a/meta-openeuler/recipes-core/bind/bind_9.11.14.bb
+++ b/meta-openeuler/recipes-core/bind/bind_9.11.14.bb
@@ -69,7 +69,7 @@ do_install_append() {
 	install -d "${D}${sysconfdir}/bind"
 	install -d "${D}${sysconfdir}/init.d"
 	install -m 644 ${S}/conf/* "${D}${sysconfdir}/bind/"
-	install -m 755 "${S}/init.d" "${D}${sysconfdir}/init.d/bind"
+	install -m 750 "${S}/init.d" "${D}${sysconfdir}/init.d/bind"
         if ${@bb.utils.contains('PACKAGECONFIG', 'python3', 'true', 'false', d)}; then
 		sed -i -e '1s,#!.*python3,#! /usr/bin/python3,' \
 		${D}${sbindir}/dnssec-coverage \
diff --git a/meta-openeuler/recipes-core/cronie/cronie_1.5.7.bb b/meta-openeuler/recipes-core/cronie/cronie_1.5.7.bb
index e08f19c6e5e67432f2a09bf6c089fbc3539f8842..d67dc8b09c49048590f47210c8b666882376a34b 100644
--- a/meta-openeuler/recipes-core/cronie/cronie_1.5.7.bb
+++ b/meta-openeuler/recipes-core/cronie/cronie_1.5.7.bb
@@ -49,7 +49,7 @@ do_install_append () {
 	install -d ${D}${sysconfdir}/sysconfig/
 	install -d ${D}${sysconfdir}/init.d/
 	install -m 0644 ${S}/crond.sysconfig ${D}${sysconfdir}/sysconfig/crond
-	install -m 0755 ${WORKDIR}/crond.init ${D}${sysconfdir}/init.d/crond
+	install -m 0750 ${WORKDIR}/crond.init ${D}${sysconfdir}/init.d/crond
 
 	# install systemd unit files
 	install -d ${D}${systemd_unitdir}/system
diff --git a/meta-openeuler/recipes-core/dhcp/dhcp.inc b/meta-openeuler/recipes-core/dhcp/dhcp.inc
index 7613d0b678ef65bd621099d7c0e6b2aa3cd849f6..9bc2442a81668e4ade12d4cfd7054f53205e9cc4 100644
--- a/meta-openeuler/recipes-core/dhcp/dhcp.inc
+++ b/meta-openeuler/recipes-core/dhcp/dhcp.inc
@@ -110,7 +110,7 @@ do_install_append () {
     install -d ${D}${sysconfdir}/init.d
     install -d ${D}${sysconfdir}/default
     install -d ${D}${sysconfdir}/dhcp
-    install -m 0755 ${WORKDIR}/init-server ${D}${sysconfdir}/init.d/dhcp-server
+    install -m 0750 ${WORKDIR}/init-server ${D}${sysconfdir}/init.d/dhcp-server
     install -m 0644 ${WORKDIR}/default-server ${D}${sysconfdir}/default/dhcp-server
 
     rm -f ${D}${sysconfdir}/dhclient.conf*
diff --git a/meta-openeuler/recipes-core/initscripts/initscripts_10.12.bb b/meta-openeuler/recipes-core/initscripts/initscripts_10.12.bb
index 7c5574dd5b8d0d69bbb329998efa221a18777ff6..a244999bda9083de535654fb518351f676a4e73b 100644
--- a/meta-openeuler/recipes-core/initscripts/initscripts_10.12.bb
+++ b/meta-openeuler/recipes-core/initscripts/initscripts_10.12.bb
@@ -48,7 +48,7 @@ do_install () {
         install ${S}/network-scripts/* ${D}/etc/sysconfig/network-scripts/ 
 
         mkdir -p ${D}/etc/init.d
-        install ${S}/etc/rc.d/init.d/* ${D}/etc/init.d/
+        install -m 0750 ${S}/etc/rc.d/init.d/* ${D}/etc/init.d/
 }
 
 MASKED_SCRIPTS = ""
diff --git a/meta-openeuler/recipes-core/lvm2/lvm2_2.03.14.bb b/meta-openeuler/recipes-core/lvm2/lvm2_2.03.14.bb
index a1b6e54abe660830966eddf326a50d0e554cf053..b4f6609fc97bca0487fca545448ccd7082bbd334 100644
--- a/meta-openeuler/recipes-core/lvm2/lvm2_2.03.14.bb
+++ b/meta-openeuler/recipes-core/lvm2/lvm2_2.03.14.bb
@@ -16,6 +16,8 @@ do_install_append() {
     else
         oe_runmake 'DESTDIR=${D}' install install_initscripts
         mv ${D}${sysconfdir}/rc.d/init.d ${D}${sysconfdir}/init.d
+        chmod 0750 ${D}${sysconfdir}/init.d/blk-availability
+        chmod 0750 ${D}${sysconfdir}/init.d/lvm2-monitor
         rm -rf ${D}${sysconfdir}/rc.d
     fi
 }
diff --git a/meta-openeuler/recipes-core/nfs-utils/nfs-utils_2.5.4.bb b/meta-openeuler/recipes-core/nfs-utils/nfs-utils_2.5.4.bb
index daad3bf2e84f84c86afd67b578026b858d98628e..7b4799e7a1b45bb7694a05977730a2775405a1f7 100644
--- a/meta-openeuler/recipes-core/nfs-utils/nfs-utils_2.5.4.bb
+++ b/meta-openeuler/recipes-core/nfs-utils/nfs-utils_2.5.4.bb
@@ -109,8 +109,8 @@ HIGH_RLIMIT_NOFILE ??= "4096"
 
 do_install_append () {
 	install -d ${D}${sysconfdir}/init.d
-	install -m 0755 ${WORKDIR}/nfsserver ${D}${sysconfdir}/init.d/nfsserver
-	install -m 0755 ${WORKDIR}/nfscommon ${D}${sysconfdir}/init.d/nfscommon
+	install -m 0750 ${WORKDIR}/nfsserver ${D}${sysconfdir}/init.d/nfsserver
+	install -m 0750 ${WORKDIR}/nfscommon ${D}${sysconfdir}/init.d/nfscommon
 
 	install -m 0755 ${WORKDIR}/nfs-utils.conf ${D}${sysconfdir}
 	install -m 0755 ${S}/utils/mount/nfsmount.conf ${D}${sysconfdir}
diff --git a/meta-openeuler/recipes-core/os-base/os-base_1.0.bb b/meta-openeuler/recipes-core/os-base/os-base_1.0.bb
index 8276b7426e647e339e1d158611d0548983fc88f8..5e08baabb17cc22295ca27cf00cb5715dd28a704 100644
--- a/meta-openeuler/recipes-core/os-base/os-base_1.0.bb
+++ b/meta-openeuler/recipes-core/os-base/os-base_1.0.bb
@@ -46,21 +46,25 @@ do_install() {
 	install -m 0744 ${WORKDIR}/rc.functions ${D}/etc/rc.d
 	install -m 0744 ${WORKDIR}/rc.sysinit ${D}/etc/rc.d
 	install -m 0744 ${WORKDIR}/rc.local ${D}/etc/rc.d
-        install -m 0755 -d ${D}/etc/init.d/
+    install -m 0750 -d ${D}/etc/init.d/
 	install -m 0750 ${WORKDIR}/rcS ${D}/etc/init.d/
 	install -m 0750 ${WORKDIR}/load_modules ${D}/etc/init.d/
-        mkdir -p ${D}/var/log/
-        touch ${D}/var/log/messages ${D}/var/log/lastlog
-        mkdir -p ${D}/var/run/faillock ${D}/tmp
-        mkdir -p ${D}/proc ${D}/sys ${D}/root ${D}/dev ${D}/sys/fs/cgroup
-        mkdir -p ${D}/var/log/audit ${D}/var/run/sshd
-        if [ "${hostname}" ]; then
-            echo ${hostname} > ${D}${sysconfdir}/hostname
-            echo "127.0.1.1 ${hostname}" >> ${D}${sysconfdir}/hosts
-        fi
-        mkdir -p ${D}${sysconfdir}/security/
-        touch ${D}${sysconfdir}/security/opasswd
-        chmod 600 ${D}${sysconfdir}/security/opasswd
+    mkdir -p ${D}/var/log/
+    touch ${D}/var/log/messages ${D}/var/log/lastlog
+    mkdir -p ${D}/var/run/faillock ${D}/tmp
+    mkdir -p ${D}/proc ${D}/sys ${D}/root ${D}/dev ${D}/sys/fs/cgroup
+    mkdir -p ${D}/var/log/audit ${D}/var/run/sshd
+    if [ "${hostname}" ]; then
+        echo ${hostname} > ${D}${sysconfdir}/hostname
+        echo "127.0.1.1 ${hostname}" >> ${D}${sysconfdir}/hosts
+    fi
+    mkdir -p ${D}${sysconfdir}/security/
+    touch ${D}${sysconfdir}/security/opasswd
+    chmod 600 ${D}${sysconfdir}/security/opasswd
+    chmod 750 ${D}$/lib/modules
+    chmod 750 ${D}/var/volatile/log
+    chmod 700 ${D}/root
+
 }
 
 do_install_append_arm() {
diff --git a/meta-openeuler/recipes-core/rpcbind/rpcbind_1.2.6.bb b/meta-openeuler/recipes-core/rpcbind/rpcbind_1.2.6.bb
index 526e9401d58690bca897a131138ab8963687cde1..347851b9266fefaad6576778abbe9e53b7de0a4e 100644
--- a/meta-openeuler/recipes-core/rpcbind/rpcbind_1.2.6.bb
+++ b/meta-openeuler/recipes-core/rpcbind/rpcbind_1.2.6.bb
@@ -49,7 +49,7 @@ do_install_append () {
 	sed -e 's,/etc/,${sysconfdir}/,g' \
 		-e 's,/sbin/,${sbindir}/,g' \
 		${WORKDIR}/init.d > ${D}${sysconfdir}/init.d/rpcbind
-	chmod 0755 ${D}${sysconfdir}/init.d/rpcbind
+	chmod 0750 ${D}${sysconfdir}/init.d/rpcbind
 }
 
 ALTERNATIVE_${PN} = "rpcinfo"