diff --git a/interfaces/innerkits/local_code_sign/BUILD.gn b/interfaces/innerkits/local_code_sign/BUILD.gn
index 99827d1e007c14f30466db06b08f2aff1324aefe..5c5a55aa00b325c5f9250bb61973bb1b7eebdb56 100644
--- a/interfaces/innerkits/local_code_sign/BUILD.gn
+++ b/interfaces/innerkits/local_code_sign/BUILD.gn
@@ -19,6 +19,12 @@ config("public_local_code_sign_configs") {
 }
 
 ohos_shared_library("liblocal_code_sign_sdk") {
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+  branch_protector_ret = "pac_ret"
   sources = [
     "src/local_code_sign_client.cpp",
     "src/local_code_sign_kit.cpp",
@@ -34,8 +40,8 @@ ohos_shared_library("liblocal_code_sign_sdk") {
 
   external_deps = [
     "c_utils:utils",
-    "hisysevent:libhisysevent",
     "hilog:libhilog",
+    "hisysevent:libhisysevent",
     "ipc:ipc_core",
     "safwk:system_ability_fwk",
     "samgr:samgr_proxy",
diff --git a/services/local_code_sign/BUILD.gn b/services/local_code_sign/BUILD.gn
index 8b3f3b0ccfe17d2f8c7bee0b6f3a21824141e91c..5c38c04709626efd0d370272f182762d61d9d4ae 100644
--- a/services/local_code_sign/BUILD.gn
+++ b/services/local_code_sign/BUILD.gn
@@ -16,6 +16,12 @@ import("//build/ohos/sa_profile/sa_profile.gni")
 import("../../code_signature.gni")
 
 ohos_shared_library("liblocal_code_sign") {
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+  branch_protector_ret = "pac_ret"
   sources = [
     "${code_signature_root_dir}/utils/src/cert_utils.cpp",
     "src/local_code_sign_service.cpp",
diff --git a/test/unittest/BUILD.gn b/test/unittest/BUILD.gn
index 82a2287943ecf8c882ad1352b49b7382905e978b..9acd9b5175c5353871178fc059665db9c078d61c 100644
--- a/test/unittest/BUILD.gn
+++ b/test/unittest/BUILD.gn
@@ -64,6 +64,12 @@ ohos_unittest("code_sign_utils_unittest") {
 }
 
 ohos_unittest("local_code_sign_unittest") {
+  sanitize = {
+    cfi = true
+    cfi_cross_dso = true
+    debug = false
+  }
+  branch_protector_ret = "pac_ret"
   module_out_path = "security/code_signature"
   resource_config_file = "resources/ohos_test.xml"
   sources = [ "local_code_sign_test.cpp" ]