diff --git a/kexec-tools.changes b/kexec-tools.changes
index 23985e4..6013cb7 100644
--- a/kexec-tools.changes
+++ b/kexec-tools.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Apr 20 12:01:43 UTC 2021 - Wolfgang Frisch <wolfgang.frisch@suse.com>
+
+- Hardening: Link as PIE (bsc#1185020).
+
 -------------------------------------------------------------------
 Tue Nov 24 16:54:57 UTC 2020 - Ludwig Nussel <lnussel@suse.de>
 
diff --git a/kexec-tools.spec b/kexec-tools.spec
index f0e6bfc..d297ab3 100644
--- a/kexec-tools.spec
+++ b/kexec-tools.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package kexec-tools
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -47,7 +47,7 @@ BuildRequires:  zlib-devel
 #!BuildIgnore:  gcc-PIE
 Requires:       perl-Bootloader
 Requires(post): suse-module-tools
-Requires(postun): suse-module-tools
+Requires(postun):suse-module-tools
 %{?systemd_requires}
 %ifarch         x86_64
 BuildRequires:  pkgconfig
@@ -77,8 +77,9 @@ the loaded kernel after it panics.
 
 %build
 autoreconf -fvi
-export CFLAGS="%{optflags}"
+export CFLAGS="%{optflags} -fPIC"
 export BUILD_CFLAGS="%{optflags}"
+export LDFLAGS="-pie"
 %configure
 make %{?_smp_mflags}