diff --git a/shadowsocks-libev.changes b/shadowsocks-libev.changes
index cfb3c87..96f7da9 100644
--- a/shadowsocks-libev.changes
+++ b/shadowsocks-libev.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Dec 13 13:52:10 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
+
+- Set permissions as 640 for /etc/shadowsocks (boo#1216372) 
+
 -------------------------------------------------------------------
 Tue Oct 24 06:50:28 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
 
diff --git a/shadowsocks-libev.spec b/shadowsocks-libev.spec
index 9abf660..9b43ff5 100644
--- a/shadowsocks-libev.spec
+++ b/shadowsocks-libev.spec
@@ -172,6 +172,7 @@ getent passwd shadowsocks >/dev/null || %{_sbindir}/useradd --system -c "shadows
 %service_add_post %{name}-redir@.service
 %service_add_post %{name}-tunnel@.service
 chown root:shadowsocks %{_sysconfdir}/shadowsocks -R
+chmod 640 %{_sysconfdir}/shadowsocks -R
 
 %preun
 %service_del_preun %{name}-server.service