diff --git a/cmake/Package.cmake b/cmake/Package.cmake
index c83742c..3115768 100644
--- a/cmake/Package.cmake
+++ b/cmake/Package.cmake
@@ -17,6 +17,8 @@ set(CPACK_RPM_PACKAGE_AUTOREQPROV "no")
 set(CPACK_RPM_PACKAGE_RELEASE_DIST on)
 set(CPACK_RPM_DEBUGINFO_PACKAGE on)
 
+set(CPACK_RPM_POST_INSTALL_SCRIPT_FILE ${CMAKE_SOURCE_DIR}/cmake/PostInstall.in)
+
 install(FILES compose/docker-compose.yml DESTINATION ./compose)
 install(FILES k8s-resource/tsg-diagnose-client.yaml DESTINATION ./k8s-resource)
 install(FILES k8s-resource/tsg-diagnose-server.yaml DESTINATION ./k8s-resource)
diff --git a/cmake/PostInstall.in b/cmake/PostInstall.in
new file mode 100644
index 0000000..56166f8
--- /dev/null
+++ b/cmake/PostInstall.in
@@ -0,0 +1,3 @@
+chmod 0755 /opt/tsg/tsg-diagnose/etc/.certs_import/certs/tool
+chmod 0755 /opt/tsg/tsg-diagnose/scripts/tsg-diagnose-oneshot
+chmod 0755 /opt/tsg/tsg-diagnose/scripts/tsg-diagnose-periodical