diff --git a/tboot.spec b/tboot.spec
index 1738382a40d74193ef82b1f905470591db62cecd..88ff7779a3f883a4d31752f6a681f90b2e5474a1 100644
--- a/tboot.spec
+++ b/tboot.spec
@@ -1,7 +1,7 @@
 Name:           tboot
 Summary:        A module to perform a measured and verified launch
 Version:        1.10.2
-Release:        2
+Release:        3
 Epoch:          1
 License:        BSD-3-Clause
 
@@ -23,6 +23,7 @@ and verified launch of an OS kernel/VMM
 %autosetup -p1
 
 %build
+CFLAGS="$RPM_OPT_FLAGS -Wl,-z,relro,-z,now -fPIE -pie"; export CFLAGS
 %make_build debug=y
 
 %install
@@ -41,6 +42,9 @@ and verified launch of an OS kernel/VMM
 %{_mandir}/man8/*.gz
 
 %changelog
+* Tue Jul 12 2022 Hugel <gengqihu1@h-partners.com> - 1:1.10.2-3
+- Add sec compile option
+
 * Tue May 10 2022 caodongxia <caodongxia@h-partners.com> - 1:1.10.2-2
 - License compliance rectification