diff --git a/ChangeLog b/ChangeLog
index 1aef78224c..105e6f07be 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+Thu Feb 14 16:02:51 2008  Nobuyoshi Nakada  <nobu@ruby-lang.org>
+
+	* file.c (rb_file_s_utime): inhibits with secure level 2 or higher.
+
 Thu Feb 14 12:30:02 2008  Tanaka Akira  <akr@fsij.org>
 
 	* re.c (rb_reg_preprocess_dregexp): use non-preprocessed regexp source
diff --git a/file.c b/file.c
index 12dc3ebba8..efa9cf9dbe 100644
--- a/file.c
+++ b/file.c
@@ -2133,6 +2133,7 @@ rb_file_s_utime(int argc, VALUE *argv)
     struct timespec tss[2], *tsp = NULL;
     long n;
 
+    rb_secure(2);
     rb_scan_args(argc, argv, "2*", &atime, &mtime, &rest);
 
     if (!NIL_P(atime) || !NIL_P(mtime)) {