diff --git a/0001-Remove-unsupported-permission-names.patch b/0001-Remove-unsupported-permission-names.patch
new file mode 100644
index 0000000000000000000000000000000000000000..661015ef36d368649b4fa9f9136c08cb46c559d5
--- /dev/null
+++ b/0001-Remove-unsupported-permission-names.patch
@@ -0,0 +1,15 @@
+diff --git a/selinux/openvswitch-custom.te.in b/selinux/openvswitch-custom.te.in
+index 2adaf23..b2c63ab 100644
+--- a/selinux/openvswitch-custom.te.in
++++ b/selinux/openvswitch-custom.te.in
+@@ -78,8 +78,8 @@ domtrans_pattern(openvswitch_t, openvswitch_load_module_exec_t, openvswitch_load
+ 
+ #============= openvswitch_t ==============
+ allow openvswitch_t self:capability { dac_override audit_write net_broadcast net_raw };
+-allow openvswitch_t self:netlink_audit_socket { create nlmsg_relay audit_write read write };
+-allow openvswitch_t self:netlink_netfilter_socket { create nlmsg_relay audit_write read write };
++allow openvswitch_t self:netlink_audit_socket { create nlmsg_relay  read write };
++allow openvswitch_t self:netlink_netfilter_socket { create read write };
+ @begin_dpdk@
+ allow openvswitch_t self:netlink_rdma_socket { setopt bind create };
+ @end_dpdk@
diff --git a/openvswitch.spec b/openvswitch.spec
index f0d25a1dea1ab901543e95dfe432d7470dd4d0c9..c7efb1b0d4704868923c6de2a8e24ebc84fd23e9 100644
--- a/openvswitch.spec
+++ b/openvswitch.spec
@@ -3,10 +3,11 @@ Summary:        Production Quality, Multilayer Open Virtual Switch
 URL:            http://www.openvswitch.org/
 Version:        2.12.0
 License:        ASL 2.0
-Release:        6
+Release:        7
 Source:         https://www.openvswitch.org/releases/openvswitch-%{version}.tar.gz
 Buildroot:      /tmp/openvswitch-rpm
 Patch0000:      0000-openvswitch-add-stack-protector-strong.patch
+Patch0001:      0001-Remove-unsupported-permission-names.patch
 Requires:       logrotate hostname python >= 2.7 python2-six selinux-policy-targeted
 BuildRequires:  python2-six, openssl-devel checkpolicy selinux-policy-devel autoconf automake libtool python-sphinx unbound-devel
 Provides:       openvswitch-selinux-policy = %{version}-%{release}
@@ -32,7 +33,7 @@ Summary:        Helpful information for Open vSwitch
 Documents and helpful information for Open vSwitch.
 
 %prep
-%autosetup
+%autosetup -p1
 
 %build
 autoreconf
@@ -202,6 +203,9 @@ exit 0
 %doc README.rst NEWS rhel/README.RHEL.rst
 
 %changelog
+* Fri Nov 6 2020 zhangjiapeng <zhangjiapeng9@huawei.com> - 2.12.0-7
+- Remove unsupported permission names
+
 * Fri Sep 25 2020 luosuwang <oenetdev@huawei.com> - 2.12.0-6
 - Remove openvswitch-kmod package