diff --git a/dpdk.spec b/dpdk.spec
index d981d862af420d9a0c5177f3f1dba212f3321c23..06b2dc3c7bd97964ec2179d5ca900ddfa08187c7 100644
--- a/dpdk.spec
+++ b/dpdk.spec
@@ -138,6 +138,7 @@ This package contains the pdump tool for capture the dpdk network packets.
 %build
 namer=%{kern_devel_ver}
 export RTE_KERNELDIR=/lib/modules/${namer}/build
+export EXTRA_CFLAGS="-fstack-protector-strong"
 make O=%{target} T=%{config} config
 #make .so libraries for spdk
 sed -ri 's,(CONFIG_RTE_BUILD_SHARED_LIB=).*,\1y,' %{target}/.config
@@ -236,8 +237,8 @@ strip -g $RPM_BUILD_ROOT/lib/modules/${namer}/extra/dpdk/rte_kni.ko
 /usr/sbin/depmod
 
 %changelog
-* Mon Apr 5 2021 wu-changsheng<851744572@qq.com> - 19.11-11
-- add support for gazelle
+* Mon Mar 15 2021 wutao <wutao61@huawei.com> - 19.11-11
+- add fstack-protector-strong gcc flags
 
 * Thu Jan 28 2021 huangliming<huangliming5@huawei.com> - 19.11-10
 - fix populate with small virtual chunks