diff --git a/postfix.spec b/postfix.spec
index 336515c..4467b3a 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -23,21 +23,10 @@
 Name:           postfix
 Summary:        Postfix Mail Transport Agent
 Version:        3.3.1
-Release:        9
+Release:        10
 Epoch:          2
 URL:            http://www.postfix.org
 License:        (IBM and GPLv2+) or (EPL-2.0 and GPLv2+)
-
-Requires(post): systemd-sysv %{_sbindir}/alternatives %{_bindir}/openssl
-Requires(pre):  %{_sbindir}/groupadd %{_sbindir}/useradd
-Requires(preun): %{_sbindir}/alternatives
-%{?systemd_requires}
-Requires: diffutils
-
-Provides:       MTA smtpd smtpdaemon server(smtp)
-Provides:       %{name}-mysql %{name}-sqlite %{name}-ldap %{name}-pcre
-Obsoletes:      %{name}-mysql %{name}-sqlite %{name}-ldap %{name}-pcre
-
 Source0:        ftp://ftp.porcupine.org/mirrors/postfix-release/official/%{name}-%{version}.tar.gz
 Source1:        postfix-etc-init.d-postfix
 Source2:        postfix.service
@@ -58,6 +47,15 @@ Patch6000:      fix-postfix-build-failed.patch
 
 BuildRequires:  libdb-devel perl-generators pkgconfig zlib-devel systemd-units libicu-devel libnsl2-devel gcc m4 openldap-devel
 BuildRequires:  cyrus-sasl-devel pcre-devel mariadb-connector-c-devel postgresql-devel sqlite-devel tinycdb-devel openssl-devel procps-ng
+Requires(post): systemd-sysv %{_sbindir}/alternatives %{_bindir}/openssl
+Requires(pre):  %{_sbindir}/groupadd %{_sbindir}/useradd
+Requires(preun): %{_sbindir}/alternatives
+%{?systemd_requires}
+Requires: diffutils
+
+Provides:       MTA smtpd smtpdaemon server(smtp)
+Provides:       %{name}-mysql %{name}-sqlite %{name}-ldap %{name}-pcre
+Obsoletes:      %{name}-mysql %{name}-sqlite %{name}-ldap %{name}-pcre
 
 %description
 Postfix is a Mail Transport Agent (MTA).
@@ -453,12 +451,12 @@ fi
 %{_sbindir}/sendmail.postfix
 /usr/lib/sendmail.postfix
 %ghost %{_sysconfdir}/pam.d/smtp
-%ghost  %{_bindir}/mailq
-%ghost  %{_bindir}/newaliases
-%ghost  %{_bindir}/rmail
-%ghost  %{_sbindir}/sendmail
-%ghost  /usr/lib/sendmail
-%ghost  %{_var}/lib/misc/postfix.aliasesdb-stamp
+%ghost %attr(0755, root, root) %{_bindir}/mailq
+%ghost %attr(0755, root, root) %{_bindir}/newaliases
+%ghost %attr(0755, root, root) %{_bindir}/rmail
+%ghost %attr(0755, root, root) %{_sbindir}/sendmail
+%ghost %attr(0755, root, root) %{_prefix}/lib/sendmail
+%ghost %attr(0644, root, root) %{_var}/lib/misc/postfix.aliasesdb-stamp
 %exclude %{postfix_doc_dir}/pflogsumm-faq.txt
 %exclude %{postfix_doc_dir}/README_FILES/*
 %exclude %{_mandir}/man5/*_table.5*
@@ -507,6 +505,9 @@ fi
 %{postfix_doc_dir}/README_FILES/*
 
 %changelog
+* Wed Dec 25 2019 openEuler Buildteam <buildteam@openeuler.org> - 2:3.3.1-10
+- change permission of files
+
 * Sat Dec 21 2019 openEuler Buildteam <buildteam@openeuler.org> - 2:3.3.1-9
 - Type:bugfix
 - ID:NA