diff --git a/iscsi-initiator-utils.spec b/iscsi-initiator-utils.spec
index 3f3f503..71486b9 100644
--- a/iscsi-initiator-utils.spec
+++ b/iscsi-initiator-utils.spec
@@ -1,3 +1,4 @@
+%global _hardened_build 1
 %{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")}
 
 %define open_iscsi_version	2.0
@@ -126,12 +127,13 @@ cd ..
 
 
 %build
-make OPTFLAGS="%{optflags} -DUSE_KMOD -lkmod"
+make OPTFLAGS="%{optflags} %{?__global_ldflags} -DUSE_KMOD -lkmod"
 
 cd iscsiuio
 chmod u+x configure
 ./configure --enable-debug
-make OPTFLAGS="%{optflags}"
+make OPTFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" CFLAGS="$RPM_OPT_FLAGS" CXXFLAGS="$RPM_OPT_FLAGS"
+
 cd ..
 
 pushd libiscsi
@@ -271,7 +273,7 @@ fi
 %changelog
 * Tue Jun 11 2013 Chris Leech <cleech@redhat.com> - 6.2.0.873-7
 - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
-  Otherwise selinux labeling is wrong when created by a manual iscsiadm command
+- 955167 build as a position independent executable
 
 * Tue May 28 2013 Chris Leech <cleech@redhat.com> - 6.2.0.873-6
 - Don't have iscsiadm scan for autostart record if node db is empty (bug #951951)