diff --git a/sssd.spec b/sssd.spec
index 1cacdd945b773c8c6642039c06f5a076d3b61b02..5e163631666a10ebdf8b7633248cb4952570c425 100644
--- a/sssd.spec
+++ b/sssd.spec
@@ -8,7 +8,7 @@
 
 Name: sssd
 Version: 2.9.4
-Release: 11
+Release: 12
 Summary: System Security Services Daemon
 License: GPL-3.0-or-later
 URL: https://github.com/SSSD/sssd/
@@ -514,6 +514,7 @@ chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/selinux_child
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_krb5.so
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/krb5_child
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/ldap_child
+chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/sssd_kcm
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_ldap.so
 chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_proxy.so
 chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/proxy_child
@@ -924,6 +925,9 @@ fi
 %systemd_postun_with_restart sssd.service
 
 %changelog
+* Tue Jul 01 2025 xuraoqing <xuraoqing@huawei.com> - 2.9.4-12
+- remove rpath in sssd_kcm
+
 * Thu Dec 05 2024 wangjiang <app@cameyan.com> - 2.9.4-11
 - backport make sure invalid krb5 context is not used