diff --git a/shadowsocks-rust.changes b/shadowsocks-rust.changes
index 79caaa8..4579c6e 100644
--- a/shadowsocks-rust.changes
+++ b/shadowsocks-rust.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Dec 13 13:55:57 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
+
+- Set permissions as 640 for /etc/shadowsocks (boo#1216372)
+
 -------------------------------------------------------------------
 Sun Dec  3 09:25:05 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
 
diff --git a/shadowsocks-rust.spec b/shadowsocks-rust.spec
index c55a764..64ff6d2 100644
--- a/shadowsocks-rust.spec
+++ b/shadowsocks-rust.spec
@@ -87,6 +87,7 @@ getent passwd shadowsocks >/dev/null || %{_sbindir}/useradd --system -c "shadows
 %service_add_post %{name}-server.service
 %service_add_post %{name}-manager.service
 chown root:shadowsocks %{_sysconfdir}/shadowsocks -R
+chmod 640 %{_sysconfdir}/shadowsocks -R
 
 %preun
 %service_del_preun %{name}-client.service