diff --git a/efibootmgr.changes b/efibootmgr.changes
index c41fe28..b3edb05 100644
--- a/efibootmgr.changes
+++ b/efibootmgr.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sat Jun 10 14:45:44 UTC 2017 - meissner@suse.com
+
+- forcefully enable PIE
+
 -------------------------------------------------------------------
 Fri Mar  3 20:46:25 UTC 2017 - rw@suse.com
 
diff --git a/efibootmgr.spec b/efibootmgr.spec
index 128f285..5d9ae85 100644
--- a/efibootmgr.spec
+++ b/efibootmgr.spec
@@ -62,7 +62,7 @@ case "%{_repository}" in
 (SUSE*|SLE*)  VENDOR="SUSE";;
 (*)           VENDOR="linux";;
 esac
-make %{?_smp_mflags} CFLAGS="%{optflags} -flto" \
+make %{?_smp_mflags} CFLAGS="%{optflags} -flto -fPIE -pie" \
 	OS_VENDOR="$VENDOR" EFI_LOADER="$LOADER"
 
 %install