diff --git a/nvwa.spec b/nvwa.spec
index 9a7ae753eb0efb24397bea58da7f5b6e5141169b..1353f2a59687d338de188da607513b9b2c81dcaa 100644
--- a/nvwa.spec
+++ b/nvwa.spec
@@ -1,6 +1,6 @@
 Name:           nvwa
 Version:        0.1
-Release:        2
+Release:        3
 Summary:        a tool used for openEuler kernel update
 
 License:        MulanPSL-2.0 and Apache-2.0 and MIT and MPL-2.0
@@ -24,11 +24,11 @@ A tool used to automate the process of seamless update of the openEuler.
 %build
 
 cd src
-go build -mod=vendor
+go build -mod=vendor -buildmode=pie
 cd -
 
 cd tools
-gcc %{name}-pin.c -o %{name}-pin
+gcc %{name}-pin.c -o %{name}-pin -fstack-protector-all -fPIE -pie -Wl,-z,noexecstack,-z,relro,-z,now
 cd -
 
 %install
@@ -74,6 +74,9 @@ install -m 0644 %{_builddir}/%{name}-v%{version}/misc/%{name}-pre.service %{buil
 %{_bindir}/%{name}-pre.sh
 
 %changelog
+* Fri 19 Mar 2021 snoweay <snoweay@163.com> - 0.1-3
+- Add secure compile args.
+
 * Thu 18 Mar 2021 anatasluo <luolongjun@huawei.com>
 - Update to 0.1-r2
 * Thu Feb 18 2021 anatasluo <luolongjun@huawei.com>