diff --git a/contrib/pagehack/Makefile b/contrib/pagehack/Makefile
index 4c944b767..ccd3ee1cb 100644
--- a/contrib/pagehack/Makefile
+++ b/contrib/pagehack/Makefile
@@ -19,11 +19,11 @@ subdir = contrib/pagehack
 top_builddir = ../..
 include $(top_builddir)/src/Makefile.global
 override CPPFLAGS += -I${top_builddir}/src/lib/page_compression
-override LDFLAGS += -L${top_builddir}/src/lib/page_compression
-override CFLAGS += -lpagecompression -lzstd -llz4
+override LDFLAGS += -L${top_builddir}/src/lib/page_compression -Wl,-z,relro,-z,now
+override CFLAGS += -lpagecompression -lzstd -llz4 -fstack-protector-all
 ifeq ($(enable_debug), yes)
 	PG_CPPFLAGS += -DDEBUG
 endif
 
 include $(top_srcdir)/contrib/contrib-global.mk
-endif
+endif
\ No newline at end of file
diff --git a/contrib/pg_xlogdump/Makefile b/contrib/pg_xlogdump/Makefile
index 61a89991d..67c7b5278 100644
--- a/contrib/pg_xlogdump/Makefile
+++ b/contrib/pg_xlogdump/Makefile
@@ -21,7 +21,9 @@ include $(top_builddir)/src/Makefile.global
 include $(top_srcdir)/contrib/contrib-global.mk
 
 
-override CPPFLAGS := -DFRONTEND $(CPPFLAGS)
+override CPPFLAGS := -DFRONTEND $(CPPFLAGS)  -fstack-protector-all -Wl,-z,relro,-z,now
+override LDFLAGS += -Wl,-z,relro,-z,now
+override CFLAGS += -fstack-protector-all
 
 xlogreader.cpp: % : $(top_srcdir)/src/gausskernel/storage/access/transam/%
 	rm -f $@ && $(LN_S) $< .