utrac doesn't honor $RPM_OPT_FLAGS, which means it's built without any compiler
provided security features and other distro wide CFLAGS.

Also, the debuginfo package is useless because the binary is explicitly stripped.

One way to fix these issues is to add these to %prep:
sed -i -e 's/^\(CFLAGS.*\)/\1 $(RPM_OPT_FLAGS)/' Makefile
sed -i -e '/^\s*strip /d' Makefile