diff --git a/xCAT-server/sbin/xcatconfig b/xCAT-server/sbin/xcatconfig
index b5001d330..5163a8ae7 100644
--- a/xCAT-server/sbin/xcatconfig
+++ b/xCAT-server/sbin/xcatconfig
@@ -880,7 +880,9 @@ if ((!-r "/etc/xcat/policy.sqlite") || $::FORCE)
         $chtabcmds .=
           "$::XCATROOT/sbin/chtab priority=4.4 policy.commands=getpostscript policy.rule=allow;";
         $chtabcmds .=
-          "$::XCATROOT/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow";
+          "$::XCATROOT/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow;";
+        $chtabcmds .=
+          "$::XCATROOT/sbin/chtab priority=4.6 policy.commands=syncfiles policy.rule=allow";
     }
     else
     {
@@ -895,7 +897,9 @@ if ((!-r "/etc/xcat/policy.sqlite") || $::FORCE)
         $chtabcmds .=
           "$::XCATROOT/sbin/chtab priority=4.4 policy.commands=getpostscript policy.rule=allow;";
         $chtabcmds .=
-          "$::XCATROOT/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow";
+          "$::XCATROOT/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow;";
+        $chtabcmds .=
+          "$::XCATROOT/sbin/chtab priority=4.6 policy.commands=syncfiles policy.rule=allow";
     }
     my $outref = xCAT::Utils->runcmd("$chtabcmds", 0);
     if ($::RUNCMD_RC != 0)
diff --git a/xCAT/xCAT.spec b/xCAT/xCAT.spec
index fb1b05f76..5af52f646 100644
--- a/xCAT/xCAT.spec
+++ b/xCAT/xCAT.spec
@@ -192,6 +192,7 @@ if [ "$1" = "1" ]; then #Only if installing for the first time..
       XCATROOT=$RPM_INSTALL_PREFIX0 $RPM_INSTALL_PREFIX0/sbin/chtab priority=4 policy.commands=getdestiny policy.rule=allow
       XCATROOT=$RPM_INSTALL_PREFIX0 $RPM_INSTALL_PREFIX0/sbin/chtab priority=4.4 policy.commands=getpostscript policy.rule=allow
       XCATROOT=$RPM_INSTALL_PREFIX0 $RPM_INSTALL_PREFIX0/sbin/chtab priority=4.5 policy.commands=getcredentials policy.rule=allow
+      XCATROOT=$RPM_INSTALL_PREFIX0 $RPM_INSTALL_PREFIX0/sbin/chtab priority=4.6 policy.commands=syncfiles policy.rule=allow
     fi
 
     if [ ! -d /etc/xcat/ca ]; then