diff --git a/services/local_code_sign/local_code_sign.cfg b/services/local_code_sign/local_code_sign.cfg
index cf2de07e453ce3c4bb861c48b6a8771824f48ef7..153b0adbc54ca525baebb66908dee66b05128833 100644
--- a/services/local_code_sign/local_code_sign.cfg
+++ b/services/local_code_sign/local_code_sign.cfg
@@ -10,6 +10,9 @@
             "name" : "local_code_sign",
             "path" : ["/system/bin/sa_main", "/system/profile/local_code_sign.json"],
             "secon": "u:r:local_code_sign:s0",
+            "permission": [
+                "ohos.permission.ATTEST_KEY"
+            ],
             "ondemand": true,
             "once": 1,
             "apl" : "system_basic",