!12 master: add sec compile option

From: @hugel 
Reviewed-by: @huangzq6, @zhuchunyi 
Signed-off-by: @zhuchunyi

tboot.spec

@@ -1,7 +1,7 @@
 Name:           tboot
 Summary:        A module to perform a measured and verified launch
 Version:        1.10.2
-Release:        2
+Release:        3
 Epoch:          1
 License:        BSD-3-Clause
 
@@ -23,6 +23,7 @@ and verified launch of an OS kernel/VMM
 %autosetup -p1
 
 %build
+CFLAGS="$RPM_OPT_FLAGS -Wl,-z,relro,-z,now -fPIE -pie"; export CFLAGS
 %make_build debug=y
 
 %install
@@ -41,6 +42,9 @@ and verified launch of an OS kernel/VMM
 %{_mandir}/man8/*.gz
 
 %changelog
+* Tue Jul 12 2022 Hugel <gengqihu1@h-partners.com> - 1:1.10.2-3
+- Add sec compile option
+
 * Tue May 10 2022 caodongxia <caodongxia@h-partners.com> - 1:1.10.2-2
 - License compliance rectification