diff --git a/macros b/macros
index 6d855fa..a197916 100644
--- a/macros
+++ b/macros
@@ -127,7 +127,9 @@
 # we don't escape symbols '~', '"', etc. so be careful when changing this
 %_hardening_ldflags	-specs=/usr/lib/rpm/redhat/redhat-hardened-ld
 
-#_hardened_build	0
+# Harden packages by default for Fedora 23:
+# https://fedorahosted.org/fesco/ticket/1384 (accepted on 2014-02-11)
+%_hardened_build	1
 %_hardened_cflags	%{?_hardened_build:%{_hardening_cflags}}
 %_hardened_ldflags	%{?_hardened_build:%{_hardening_ldflags}}
 
diff --git a/redhat-rpm-config.spec b/redhat-rpm-config.spec
index a57a923..87581fe 100644
--- a/redhat-rpm-config.spec
+++ b/redhat-rpm-config.spec
@@ -6,7 +6,7 @@
 
 Summary: Red Hat specific rpm configuration files
 Name: redhat-rpm-config
-Version: 27
+Version: 28
 Release: 1%{?dist}
 # No version specified.
 License: GPL+
@@ -135,6 +135,9 @@ install -p -m 755 -t %{buildroot}%{_rpmconfigdir} kmod.prov
 %{_rpmconfigdir}/macros.d/macros.kmp
 
 %changelog
+* Thu Feb 19 2015 Till Maas <opensource@till.name> - 28-1
+- Enable harden flags by default (#1192183)
+
 * Wed Dec 10 2014 Dan Horák <dan[at]danny.cz> - 27-1
 - Explicitly set -mcpu/-mtune for ppc64p7 and ppc64le to override rpm defaults