diff --git a/tboot.spec b/tboot.spec
index 7c71994f66198021dfb5455996d485c5bc0f8ae1..395f3270a09e557de34c5c2ff206e234bf034cba 100644
--- a/tboot.spec
+++ b/tboot.spec
@@ -1,7 +1,7 @@
 Name:           tboot
 Summary:        A module to perform a measured and verified launch
 Version:        1.9.12
-Release:        1
+Release:        2
 Epoch:          1
 License:        BSD
 
@@ -23,6 +23,7 @@ and verified launch of an OS kernel/VMM
 %autosetup -p1
 
 %build
+CFLAGS="$RPM_OPT_FLAGS -Wl,-z,relro,-z,now -fPIE -pie -Wno-implicit-fallthrough"; export CFLAGS
 %make_build debug=y
 
 %install
@@ -41,6 +42,9 @@ and verified launch of an OS kernel/VMM
 %{_mandir}/man8/*.gz
 
 %changelog
+* Tue Jul 12 2022 Hugel <gengqihu1@h-partners.com> - 1:1.9.12-2
+- Add sec compile option
+
 * Thu Aug 27 2020 wangchen<wangchen137g@huawei.com> - 1:1.9.12-1
 - update to 1.9.12