diff --git a/openEuler-rpm-config.spec b/openEuler-rpm-config.spec
index a493386bad75d03d9f77fe4f9ace066b7150722a..44064da2e493e9551665c18243a92d9bd73c5879 100644
--- a/openEuler-rpm-config.spec
+++ b/openEuler-rpm-config.spec
@@ -3,7 +3,7 @@
 
 Name:		%{vendor}-rpm-config
 Version:	31
-Release:	15
+Release:	16
 License:	GPL+
 Summary:	specific rpm configuration files
 URL:		https://gitee.com/src-openeuler/openEuler-rpm-config
@@ -190,6 +190,9 @@ sed -i "s/@VENDOR@/%{vendor}/g" `grep "@VENDOR@" -rl %{buildroot}%{_rpmconfigdir
 %{rpmvdir}/find-requires.ksyms
 
 %changelog
+* Tue Feb 18 2025 Jun He <jun.he@arm.com> - 31-16
+- Add compile flag (-mbranch-protection=standard) to enable PAC/BTI features on aarch64 as default
+
 * Mon Feb 24 2025 yinchuang <yinchuang@huawei.com> - 31-15
 - Remove packages affected by mold
 
diff --git a/rpmrc b/rpmrc
index 45840e66db4f48a76fe6a20b7e6d76564c0b635f..5f87e96002885f94631390cc87f93eb5a9fa3fb3 100644
--- a/rpmrc
+++ b/rpmrc
@@ -5,7 +5,7 @@ optflags: athlon %{__global_compiler_flags} -m32 -march=athlon -fasynchronous-un
 optflags: ia64 %{__global_compiler_flags}
 optflags: x86_64 %{__global_compiler_flags} -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection 
 
-optflags: aarch64 %{__global_compiler_flags} -fasynchronous-unwind-tables -fstack-clash-protection
+optflags: aarch64 %{__global_compiler_flags} -mbranch-protection=standard -fasynchronous-unwind-tables -fstack-clash-protection
 optflags: riscv64 %{__global_compiler_flags} -fasynchronous-unwind-tables -fstack-clash-protection
 
 optflags: loongarch64 %{__global_compiler_flags} -fasynchronous-unwind-tables -fstack-clash-protection