diff --git a/procmail.spec b/procmail.spec
index 1e0b3af..ed6000f 100644
--- a/procmail.spec
+++ b/procmail.spec
@@ -1,7 +1,14 @@
+# hardened build if not overridden
+%{!?_hardened_build:%global _hardened_build 1}
+
+%if %{?_hardened_build}%{!?_hardened_build:0}
+%global hardened_flags -pie -Wl,-z,relro,-z,now
+%endif
+
 Summary: Mail processing program
 Name: procmail
 Version: 3.22
-Release: 30%{?dist}
+Release: 31%{?dist}
 License: GPLv2+ or Artistic
 Group: Applications/Internet
 Source: ftp://ftp.procmail.org/pub/procmail/procmail-%{version}.tar.gz
@@ -36,7 +43,7 @@ find examples -type f | xargs chmod 644
 
 %build
 make RPM_OPT_FLAGS="$(getconf LFS_CFLAGS)" autoconf.h
-make RPM_OPT_FLAGS="$RPM_OPT_FLAGS -Wno-comments $(getconf LFS_CFLAGS)"
+make RPM_OPT_FLAGS="$RPM_OPT_FLAGS %{?hardened_flags} -Wno-comments $(getconf LFS_CFLAGS)"
 
 %install
 rm -rf ${RPM_BUILD_ROOT}
@@ -66,6 +73,10 @@ rm -rf ${RPM_BUILD_ROOT}
 %{_mandir}/man[15]/*
 
 %changelog
+* Tue Sep  4 2012 Jaroslav Škarvada <jskarvad@redhat.com> - 3.22-31
+- Hardened build with PIE and full RELRO
+  Resolves: rhbz#853186
+
 * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.22-30
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild