security enhancement

Signed-off-by: rootfs <hchen@redhat.com>