diff --git a/frameworks/js/napi/BUILD.gn b/frameworks/js/napi/BUILD.gn
index 26d9e80deb7898e2d2b6d3f373160047f9630804..b7ac0d05171f400f814178a2976ebac02919a58d 100644
--- a/frameworks/js/napi/BUILD.gn
+++ b/frameworks/js/napi/BUILD.gn
@@ -33,6 +33,11 @@ ohos_shared_library("libsensor") {
     "src/sensor_napi_utils.cpp",
     "src/sensor_system_js.cpp",
   ]
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
   deps = [ "$SUBSYSTEM_DIR/frameworks/native:sensor_interface_native" ]
   external_deps = [
     "c_utils:utils",
diff --git a/frameworks/native/BUILD.gn b/frameworks/native/BUILD.gn
old mode 100755
new mode 100644
index 7f1a8754853a12dcbb7d9f10cb3d1f4b8fbe3a3d..23be87791e034008d51b0665fc0f0c89b41d5fa3
--- a/frameworks/native/BUILD.gn
+++ b/frameworks/native/BUILD.gn
@@ -33,6 +33,12 @@ ohos_shared_library("libsensor_native") {
     "$SUBSYSTEM_DIR/utils/ipc/include",
   ]
 
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   defines = sensor_default_defines
 
   deps = [
@@ -87,6 +93,12 @@ ohos_shared_library("sensor_interface_native") {
   configs = [ ":sensor_private_config" ]
   public_configs = [ ":sensor_public_config" ]
 
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   deps = [
     "$SUBSYSTEM_DIR/frameworks/native:libsensor_native",
     "$SUBSYSTEM_DIR/frameworks/native:libsensor_ndk",
diff --git a/services/BUILD.gn b/services/BUILD.gn
index 6513d2d9964e938c2a95df4027b1901184136624..c2dc6623962d14af4bf8e29393ed443d19ec38b5 100644
--- a/services/BUILD.gn
+++ b/services/BUILD.gn
@@ -35,6 +35,12 @@ ohos_shared_library("libsensor_service") {
     "$SUBSYSTEM_DIR/utils/ipc/include",
   ]
 
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   defines = sensor_default_defines
 
   deps = [
@@ -103,6 +109,12 @@ ohos_shared_library("libsensor_service_static") {
     "$SUBSYSTEM_DIR/utils/ipc/include",
   ]
 
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   defines = sensor_default_defines
 
   deps = [
diff --git a/utils/common/BUILD.gn b/utils/common/BUILD.gn
index 91777c231eec20ce583b58d1e307e9240671b510..ceecc58ac9d13ae097eddc74576256e8a85570d4 100644
--- a/utils/common/BUILD.gn
+++ b/utils/common/BUILD.gn
@@ -25,6 +25,12 @@ ohos_shared_library("libsensor_utils") {
     "src/sensor_channel_info.cpp",
   ]
 
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   include_dirs = [
     "$SUBSYSTEM_DIR/interfaces/inner_api",
     "$SUBSYSTEM_DIR/frameworks/native/include",
diff --git a/utils/ipc/BUILD.gn b/utils/ipc/BUILD.gn
index 327089e559d6895562eba791ae61fc8b593f3397..c948b9a36c1bf16d3ab2c971832490da5c7eef95 100644
--- a/utils/ipc/BUILD.gn
+++ b/utils/ipc/BUILD.gn
@@ -28,6 +28,12 @@ ohos_shared_library("libsensor_ipc") {
     "$SUBSYSTEM_DIR/utils/ipc/include",
   ]
 
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+
   defines = sensor_default_defines
 
   if (rust_socket_ipc) {