diff --git a/ocaml.spec b/ocaml.spec
index 1911150..4871cca 100644
--- a/ocaml.spec
+++ b/ocaml.spec
@@ -31,7 +31,7 @@
 
 Name:           ocaml
 Version:        4.09.0
-Release:        2%{?dist}
+Release:        3%{?dist}
 
 Summary:        OCaml compiler and programming environment
 
@@ -88,7 +88,10 @@ BuildRequires:  util-linux
 BuildRequires:  /usr/bin/annocheck
 BuildRequires:  chrpath
 
+# ocamlopt runs gcc to link binaries.  Because Fedora includes
+# hardening flags automatically, redhat-rpm-config is also required.
 Requires:       gcc
+Requires:       redhat-rpm-config
 
 # Because we pass -c flag to ocaml-find-requires (to avoid circular
 # dependencies) we also have to explicitly depend on the right version
@@ -375,6 +378,9 @@ find $RPM_BUILD_ROOT \( -name '*.cmt' -o -name '*.cmti' \) -a -delete
 
 
 %changelog
+* Tue Dec 10 2019 Richard W.M. Jones <rjones@redhat.com> - 4.09.0-3
+- Require redhat-rpm-config to get hardening flags when linking.
+
 * Thu Dec 05 2019 Richard W.M. Jones <rjones@redhat.com> - 4.09.0-2
 - OCaml 4.09.0 final.
 - Use autosetup, remove old setup line.