diff --git a/backport-change-log-file-permission-0400.patch b/backport-change-log-file-permission-0400.patch
new file mode 100644
index 0000000000000000000000000000000000000000..ebdd183d2f3dc1a9898cd8208b03f05457dcd6b3
--- /dev/null
+++ b/backport-change-log-file-permission-0400.patch
@@ -0,0 +1,24 @@
+From 1b2de0be8912fb1b705454011ed6190f52199f60 Mon Sep 17 00:00:00 2001
+From: zhengxiaoxiao <zhengxiaoxiao2@huawei.com>
+Date: Sat, 11 Jun 2022 12:17:18 +0800
+Subject: [PATCH] change log file permission 0400
+
+---
+ conf/logrotate.d/secgear | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/conf/logrotate.d/secgear b/conf/logrotate.d/secgear
+index 92da41e..f88bb59 100644
+--- a/conf/logrotate.d/secgear
++++ b/conf/logrotate.d/secgear
+@@ -5,4 +5,7 @@
+ 	nocompress
+ 	copytruncate
+ 	size 2048k
++	lastaction
++	chmod 0400 /var/log/secgear/secgear.log.*
++	endscript
+ }
+-- 
+2.27.0
+
diff --git a/secGear.spec b/secGear.spec
index 944860a0586eef41569f66b96646aaf64287a13f..6b182e7ccf04e632029a26119e8741b017218c58 100644
--- a/secGear.spec
+++ b/secGear.spec
@@ -1,6 +1,6 @@
 Name:		secGear
 Version:	0.1.0
-Release:	43
+Release:	44
 Summary:	secGear is an SDK to develop confidential computing apps based on hardware enclave features
 
 
@@ -83,6 +83,7 @@ Patch69:	0070-sign-tool-add-invalid-param-verify.patch
 Patch70:	0071-adapt-report-with-request-key.patch
 Patch71:	backport-init-attestation.patch
 Patch72:	backport-Correct-the-error-in-the-comment.patch
+Patch73:	backport-change-log-file-permission-0400.patch
 
 BuildRequires:	gcc python automake autoconf libtool
 BUildRequires:	glibc glibc-devel cmake ocaml-dune rpm gcc-c++ openssl-libs openssl-devel
@@ -253,6 +254,9 @@ popd
 systemctl restart rsyslog
 
 %changelog
+* Fri Jun 14 2024 zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 0.1.0-44
+- change log file permission 0400
+
 * Fri Jun 14 2024 zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 0.1.0-43
 - fix typo