diff --git a/gnu-efi.spec b/gnu-efi.spec
index 088a6aca82f4bc19f08361fc42fa0f4975bdd742..90ff70c91aa4c3841fc162339aa430b2f720aa9a 100644
--- a/gnu-efi.spec
+++ b/gnu-efi.spec
@@ -1,7 +1,7 @@
 %define debug_package %{nil}
 Name:          gnu-efi
 Version:       3.0.8
-Release:       9
+Release:       10
 Summary:       Development Libraries and headers for EFI
 Epoch:         1
 License:       BSD
@@ -42,6 +42,8 @@ install -d gnuefi/gnu
 install -Dp %{SOURCE1} gnuefi/gnu/
 
 %build
+sed -i 's/-fno-stack-protector/-fstack-protector-strong/g' Make.defaults
+sed -i 's/--no-undefined //g' Make.defaults
 make
 make apps
 %ifarch x86_64
@@ -76,6 +78,9 @@ mv ia32/apps/{route80h.efi,modelist.efi} %{buildroot}/boot/efi/EFI/%{efidir}/ia3
 %{_includedir}/efi
 
 %changelog
+* Mon Mar 15 2021 wutao <wutao61@huawei.com> - 3.0.8-10
+- add fstack-protector-strong gcc flags
+
 * Thu Sep 10 2020 liuweibo <liuweibo10@huawei.com> - 3.0.8-9
 - Fix Source0