diff --git a/xrdp.spec b/xrdp.spec
index 1a014ea..5a755f2 100644
--- a/xrdp.spec
+++ b/xrdp.spec
@@ -1,3 +1,5 @@
+%global _hardened_build 1
+
 Summary:   Open source remote desktop protocol (RDP) server
 Name:      xrdp
 Epoch:     1
@@ -181,6 +183,9 @@ fi
 %{_libdir}/pkgconfig/xrdp.pc
 
 %changelog
+* Tue Feb 07 2017 Pavel Roskin <plroskin@gmail.com> - 1:0.9.1-2
+- Enable hardened build
+
 * Tue Jan 24 2017 Pavel Roskin <plroskin@gmail.com> - 1:0.9.1-1
 - Split out xrdp-devel
 - Generate certificate for TLS authentication on package install