diff --git a/polkit.changes b/polkit.changes
index 6872c84..36aeff4 100644
--- a/polkit.changes
+++ b/polkit.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Aug 22 15:52:30 UTC 2012 - meissner@suse.com
+
+- also use -z now for binary hardening
+
 -------------------------------------------------------------------
 Wed Jun 13 20:54:29 CEST 2012 - vuntz@opensuse.org
 
diff --git a/polkit.spec b/polkit.spec
index 7866ff7..157c987 100644
--- a/polkit.spec
+++ b/polkit.spec
@@ -118,7 +118,7 @@ export V=1
 # needed for patch1
 autoreconf -fi
 export SUID_CFLAGS="-fPIE"
-export SUID_LDFLAGS="-pie"
+export SUID_LDFLAGS="-z now -pie"
 %configure \
   --with-os-type=suse \
   --enable-gtk-doc \