diff --git a/tpm2-tools.spec b/tpm2-tools.spec
index 4cd67a24fcadd1d01b290f508a718e31401ac380..7031b1cf917bc16ae1d3f23ab0b2bfc95dcd0305 100644
--- a/tpm2-tools.spec
+++ b/tpm2-tools.spec
@@ -1,6 +1,6 @@
 Name:          tpm2-tools
 Version:       5.0
-Release:       3
+Release:       4
 Summary:       A TPM2.0 testing tool based on TPM2.0-TSS
 License:       BSD
 URL:           https://github.com/tpm2-software/tpm2-tools
@@ -11,7 +11,7 @@ Patch1:        backport-CVE-2021-3565.patch
 
 BuildRequires: gcc-c++ libtool autoconf-archive pkgconfig(cmocka) pkgconfig(libcurl) pkgconfig(openssl)
 BuildRequires: pkgconfig(tss2-mu) pkgconfig(tss2-sys) pkgconfig(tss2-esys) pkgconfig(uuid) git libgcrypt
-BuildRequires: libgcrypt-devel gdb
+BuildRequires: libgcrypt-devel gdb chrpath
 Requires:  tpm2-tss >= 2.3.1
 Requires:  tpm2-tools-help = %{version}-%{release}
 Obsoletes: tpm2-tools <= 2.1.1-2
@@ -36,6 +36,13 @@ make %{?_smp_mflags} V=1
 rm -rf %{buildroot}
 %make_install
 
+#remove rpath
+chrpath -d %{buildroot}%{_bindir}/tss2
+chrpath -d %{buildroot}%{_bindir}/tpm2
+
+mkdir -p %{buildroot}/etc/ld.so.conf.d
+echo "%{_libdir}" > %{buildroot}/etc/ld.so.conf.d/%{name}-%{_arch}.conf
+
 %check
 make check
 
@@ -53,12 +60,16 @@ make check
 %{_bindir}/*
 %{_datadir}/bash-completion/completions/tpm2*
 %{_datadir}/bash-completion/completions/tss2*
+%config(noreplace) /etc/ld.so.conf.d/*
 
 %files help
 %doc README.md doc/CHANGELOG.md
 %{_mandir}/*/*
 
 %changelog
+* Fri Nov 10 2023 fuanan <fuanan3@h-partners.com> - 5.0-4
+- remove rpath and runpath of exec files
+
 * Mon Sep 27 2021 fuanan <fuanan3@huawei.com> - 5.0-3
 - fix CVE-2021-3565