diff --git a/interfaces/inner_api/BUILD.gn b/interfaces/inner_api/BUILD.gn
index d9384bccff7d25d46cb37f896fa04a2011696bf7..4458b7350ea3a584f4401ea6e118aff7a0b49dd2 100644
--- a/interfaces/inner_api/BUILD.gn
+++ b/interfaces/inner_api/BUILD.gn
@@ -30,6 +30,9 @@ ohos_shared_library("dbms_fwk") {
     ubsan = true
   }
 
+  cflags = [ "-fstack-protector-strong" ]
+  cflags_cc = cflags
+
   sources = [ "src/distributed_bms_proxy.cpp" ]
 
   defines = [
diff --git a/interfaces/kits/js/distributebundlemgr/BUILD.gn b/interfaces/kits/js/distributebundlemgr/BUILD.gn
index 6604733fb56ad75ca1aa0ebd077f9f2397a9c901..196b268beaf2a72989b02495b5117ab3c45199a4 100644
--- a/interfaces/kits/js/distributebundlemgr/BUILD.gn
+++ b/interfaces/kits/js/distributebundlemgr/BUILD.gn
@@ -15,6 +15,20 @@ import("//build/ohos.gni")
 import("../../../../dbms.gni")
 
 ohos_shared_library("distributedbundle") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+    integer_overflow = true
+    ubsan = true
+  }
+
+  cflags = [ "-fstack-protector-strong" ]
+  cflags_cc = cflags
+
   include_dirs = []
   defines = [
     "APP_LOG_TAG = \"DistributedBundleMgrService\"",
diff --git a/interfaces/kits/js/distributedBundle/BUILD.gn b/interfaces/kits/js/distributedBundle/BUILD.gn
index 1c1c603fd41dba5bab4bde69488382b614958537..0c1964b9b083794a03ff655672b275c6d1df7bdf 100644
--- a/interfaces/kits/js/distributedBundle/BUILD.gn
+++ b/interfaces/kits/js/distributedBundle/BUILD.gn
@@ -15,6 +15,20 @@ import("//build/ohos.gni")
 import("../../../../dbms.gni")
 
 ohos_shared_library("distributedbundlemanager") {
+  branch_protector_ret = "pac_ret"
+
+  sanitize = {
+    boundary_sanitize = true
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+    integer_overflow = true
+    ubsan = true
+  }
+
+  cflags = [ "-fstack-protector-strong" ]
+  cflags_cc = cflags
+
   defines = [
     "APP_LOG_TAG = \"DistributedBundleMgrService\"",
     "LOG_DOMAIN = 0xD0011E0",
diff --git a/services/dbms/BUILD.gn b/services/dbms/BUILD.gn
index d4f6a0fae73f9708d863abf8a02db2914ef4211e..6567949cee87f3dcf4f725c1083fd6709a47166c 100644
--- a/services/dbms/BUILD.gn
+++ b/services/dbms/BUILD.gn
@@ -36,6 +36,9 @@ ohos_shared_library("libdbms") {
     ubsan = true
   }
 
+  cflags = [ "-fstack-protector-strong" ]
+  cflags_cc = cflags
+
   sources = [
     "src/account_manager_helper.cpp",
     "src/dbms_device_manager.cpp",
diff --git a/services/dbms/test/unittest/dbms_services_kit_test/BUILD.gn b/services/dbms/test/unittest/dbms_services_kit_test/BUILD.gn
index 1ee5cde08ce998ec3d531db743a03be6d9ae9f31..249668c4654c4ae536318b89729c2cfa6b39deea 100644
--- a/services/dbms/test/unittest/dbms_services_kit_test/BUILD.gn
+++ b/services/dbms/test/unittest/dbms_services_kit_test/BUILD.gn
@@ -16,6 +16,11 @@ import("../../../../../dbms.gni")
 module_output_path = "bundle_framework/distributedbundleservice"
 
 ohos_unittest("DbmsServicesKitTest") {
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
   use_exceptions = true
   module_out_path = module_output_path
   include_dirs = [