diff --git a/arm-trusted-firmware.spec b/arm-trusted-firmware.spec
index 67a89ebc1333744e1b6aeec7ec7e1a1270efb3fe..38329019abac88e438bdcb912ca5eb3825013257 100644
--- a/arm-trusted-firmware.spec
+++ b/arm-trusted-firmware.spec
@@ -2,7 +2,7 @@
 
 Name:          arm-trusted-firmware
 Version:       2.3
-Release:       1
+Release:       2
 Summary:       ARM Trusted Firmware
 License:       BSD
 URL:           https://github.com/ARM-software/arm-trusted-firmware/wiki
@@ -27,7 +27,7 @@ sed -i 's/arm-none-eabi-/arm-linux-gnu-/' plat/rockchip/rk3399/drivers/m0/Makefi
 %build
 for soc in hikey hikey960 imx8qm imx8qx juno rk3368 rk3328 rpi3 sun50i_a64 sun50i_h6 zynqmp
 do
-make HOSTCC="gcc $RPM_OPT_FLAGS" CROSS_COMPILE="" PLAT=$(echo $soc) bl31
+make HOSTCC="gcc $RPM_OPT_FLAGS -fPIE -Wl,-z,relro -Wl,-z,now" CROSS_COMPILE="" PLAT=$(echo $soc) bl31
 done
 
 
@@ -52,12 +52,18 @@ do
 done
 done
 
+strip %{buildroot}/%{_datadir}/%{name}/rk3328/bl31.elf
+strip %{buildroot}/%{_datadir}/%{name}/rk3368/bl31.elf
+
 %files -n arm-trusted-firmware-armv8
 %license license.rst
 %doc readme.rst
 %{_datadir}/%{name}
 
 %changelog
+* Wed Aug 24 2022 wangkai <wangkai385@h-partners.com> -2.3-2
+- Add RELRO and BIND_NOW flags
+
 * Tue Jan 5 2021 huanghaitao <huanghaitao8@huawei.com> - 2.3-1
 - Update to 2.3 release