diff --git a/oncn-bwm.spec b/oncn-bwm.spec
index d7e1a2156074106cc31e8aba3e671f812c9888d4..95f10bb2ccdbdb352e3f73e7f4dbd7dd2b0904ba 100644
--- a/oncn-bwm.spec
+++ b/oncn-bwm.spec
@@ -1,6 +1,6 @@
 Name:       oncn-bwm
 Version:    1.1
-Release:    7
+Release:    8
 Summary:    Pod bandwidth management in mixed deployment scenarios of online and offline services
 License:    GPL-2.0
 URL:        https://gitee.com/src-openeuler/oncn-bwm
@@ -45,8 +45,8 @@ make
 %install
 mkdir -p %{buildroot}/%{_bindir}/%{name}
 mkdir -p %{buildroot}/usr/share/bwmcli
-install -Dpm 0500 %{_builddir}/%{name}-%{version}/build/bpf/CMakeFiles/bwm_prio_kern.dir/bwm_prio_kern.c.o      %{buildroot}/usr/share/bwmcli/bwm_prio_kern.o
-install -Dpm 0500 %{_builddir}/%{name}-%{version}/build/bpf/CMakeFiles/bwm_tc.dir/bwm_tc.c.o     %{buildroot}/usr/share/bwmcli/bwm_tc.o
+install -Dpm 0400 %{_builddir}/%{name}-%{version}/build/bpf/CMakeFiles/bwm_prio_kern.dir/bwm_prio_kern.c.o      %{buildroot}/usr/share/bwmcli/bwm_prio_kern.o
+install -Dpm 0400 %{_builddir}/%{name}-%{version}/build/bpf/CMakeFiles/bwm_tc.dir/bwm_tc.c.o     %{buildroot}/usr/share/bwmcli/bwm_tc.o
 install -Dpm 0500 %{_builddir}/%{name}-%{version}/build/bwmcli              %{buildroot}/%{_bindir}
 install -Dpm 0500 %{_builddir}/%{name}-%{version}/tools/bwm_monitor.bt      %{buildroot}/%{_bindir}
 mkdir -p %{buildroot}/lib/modules/bwm
@@ -105,8 +105,8 @@ depmod -a
 %defattr(-,root,root)
 %attr(0500,root,root) %{_bindir}/bwmcli
 %attr(0500,root,root) /usr/share/bwmcli
-%attr(0500,root,root) /usr/share/bwmcli/bwm_prio_kern.o
-%attr(0500,root,root) /usr/share/bwmcli/bwm_tc.o
+%attr(0400,root,root) /usr/share/bwmcli/bwm_prio_kern.o
+%attr(0400,root,root) /usr/share/bwmcli/bwm_tc.o
 %attr(0550,root,root) %dir /lib/modules/bwm
 %attr(0440,root,root) /lib/modules/bwm/bwm.ko
 
@@ -115,6 +115,9 @@ depmod -a
 
 
 %changelog
+* Tue Dec 24 2024 liwei <1289113577@qq.com> - 1.1-8
+- modify ebpf prog permisssions
+
 * Wed Oct 18 2023 JofDiamonds <kwb0523@163.com> - 1.1-7
 - fix net_qos_stats warning when qos not enable