diff --git a/krb5.spec b/krb5.spec
index e5ec10613282e8d1ca34a087fb24ec1b2850d4ba..44b241b33d6c5a6162a3ea5ac0c7ea72424c44e4 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -1,6 +1,8 @@
+%global _hardening_ldflags %{nil}
+
 Name:     krb5
 Version:  1.17
-Release:  3
+Release:  4
 Summary:  The Kerberos network authentication protocol
 License:  MIT
 URL:      http://web.mit.edu/kerberos/www/
@@ -292,6 +294,9 @@ make -C src check || :
 %{_mandir}/man8/*
 
 %changelog
+* Fri Nov 15 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.17-4
+- change LDFLAGS in building environment to solve build failure of pam_krb5
+
 * Thu Oct 31 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.17-3
 - Add BuildRequires: byacc