diff --git a/xorg-x11-server.spec b/xorg-x11-server.spec
index 1e33ae1d3b54b5c12ed3325d9430f384a80c5b1e..82c7c39f834b5c3f6a071accb75fca940807d4b4 100644
--- a/xorg-x11-server.spec
+++ b/xorg-x11-server.spec
@@ -16,7 +16,7 @@
 
 Name:           xorg-x11-server
 Version:        1.20.8
-Release:        6
+Release:        7
 Summary:        X.Org X11 X server
 License:        MIT and GPLv2
 URL:            https://www.x.org
@@ -209,6 +209,7 @@ export CFLAGS="$RPM_OPT_FLAGS -specs=/usr/lib/rpm/generic-hardened-cc1"
 %global kdrive --enable-kdrive --enable-xephyr --disable-xfake --disable-xfbdev
 %global bodhi_flags --with-vendor-name="openEuler Project"
 %global dri_flags --enable-dri --enable-dri2 --enable-dri3 --enable-suid-wrapper --enable-glamor
+%global optflags  %(echo %{optflags} -Wl,-z,now)
 
 autoreconf -ivf || exit 1
 
@@ -329,6 +330,12 @@ find %{inst_srcdir}/hw/xfree86 -name \*.c -delete
 %{_libdir}/xorg/protocol.txt
 
 %changelog
+* Mon Jun 07 2021 zhanzhimin<zhanzhimin@huawei.com> - 1.20.8-7
+- Type:bugfix
+- Id:NA
+- SUG:NA
+- DESC:add secure compilation options
+
 * Mon Jun 07 2021 wangkerong<wangkerong@huawei.com> - 1.20.8-6
 - Type:NA
 - Id:NA