diff --git a/tboot.spec b/tboot.spec
index fe38c95..038a27e 100644
--- a/tboot.spec
+++ b/tboot.spec
@@ -1,7 +1,7 @@
 Summary:        Performs a verified launch using Intel TXT
 Name:           tboot
 Version:        1.10.2
-Release:        2%{?dist}
+Release:        3%{?dist}
 Epoch:          1
 
 License:        BSD
@@ -27,7 +27,8 @@ and verified launch of an OS kernel/VMM.
 %autosetup -p1 -n %{name}-%{version}
 
 %build
-CFLAGS="$RPM_OPT_FLAGS"; export CFLAGS
+CFLAGS="%{optflags}"; export CFLAGS
+LDFLAGS="%{build_ldflags}"; export LDFLAGS
 make debug=y %{?_smp_mflags}
 
 %install
@@ -57,6 +58,11 @@ make debug=y DISTDIR=$RPM_BUILD_ROOT install
 /boot/tboot-syms
 
 %changelog
+* Tue Jul 27 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
+- Add the %{optflags} and %{build_ldflags} macros to assure the
+  build meets RHEL security requirements.
+  Resolves: rhbz#1922002
+
 * Thu Jul 22 2021 Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
 - Bump the NVR as a result of including the gating.yaml file in
   the git repo.