diff --git a/aarch64-bl31 b/aarch64-bl31
new file mode 100644
index 0000000000000000000000000000000000000000..568b9ecba179f7f0f2b59087846576a367a9db0a
--- /dev/null
+++ b/aarch64-bl31
@@ -0,0 +1,9 @@
+hikey
+hikey960
+imx8qm
+imx8qx
+juno
+rpi3
+sun50i_a64
+sun50i_h6
+zynqmp
\ No newline at end of file
diff --git a/arm-trusted-firmware.spec b/arm-trusted-firmware.spec
index e78797cdb3510fa7c468992b7b06b6a93ac354a2..50436f28fa01b40d016601c6f96f2f014e9efb07 100644
--- a/arm-trusted-firmware.spec
+++ b/arm-trusted-firmware.spec
@@ -1,4 +1,4 @@
-%define anolis_release 1
+%define anolis_release 2
 
 %global debug_package %{nil}
 
@@ -9,7 +9,7 @@ Summary: ARM Trusted Firmware
 License: BSD
 URL:     https://github.com/ARM-software/arm-trusted-firmware
 Source0: https://github.com/ARM-software/arm-trusted-firmware/archive/refs/tags/v%{version}.tar.gz
-
+Source1: aarch64-bl31
 Patch0001:  0001-atf-2.8-fix-linking.patch
 
 ExclusiveArch: aarch64
@@ -45,14 +45,16 @@ The arm-trusted-firmware-armv8-doc package contains documentation files for arm-
 
 %prep
 %autosetup -n %{name}-%{version} -p1
+cp %SOURCE1 .
 sed -i 's/arm-none-eabi-/arm-linux-gnu-/' plat/rockchip/rk3399/drivers/m0/Makefile
 
 %build
+%undefine _auto_set_build_flags
 %ifarch aarch64
 for soc in $(cat %{_arch}-bl31)
 do
 # At the moment we're only making the secure firmware (bl31)
-make HOSTCC="gcc $RPM_OPT_FLAGS" CROSS_COMPILE="" PLAT=$(echo $soc) bl31
+make HOSTCC="gcc $RPM_OPT_FLAGS -fPIE -Wl,-z,relro,-z,now" CROSS_COMPILE="" PLAT=$(echo $soc) bl31
 done
 %endif
 
@@ -99,5 +101,8 @@ done
 %doc readme.rst
 
 %changelog
+* Mon Apr 17 2023 yuanhui <yuanhui@linux.alibaba.com> - 2.8-2
+- Fix the bug for sun50i_a64 not found error
+
 * Sat Apr 15 2023 yuanhui <yuanhui@linux.alibaba.com> - 2.8-1
 - Init package from upstream