diff --git a/bind.spec b/bind.spec
index e945794..a35a6f3 100644
--- a/bind.spec
+++ b/bind.spec
@@ -44,7 +44,7 @@ Summary:  The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serv
 Name:     bind
 License:  MPLv2.0
 Version:  9.11.3
-Release:  7%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
+Release:  8%{?PATCHVER:.%{PATCHVER}}%{?PREVER:.%{PREVER}}%{?dist}
 Epoch:    32
 Url:      http://www.isc.org/products/BIND/
 #
@@ -134,6 +134,7 @@ Obsoletes:      caching-nameserver < 31:9.4.1-7.fc8
 Provides:       caching-nameserver = 31:9.4.1-7.fc8
 Obsoletes:      dnssec-conf < 1.27-2
 Provides:       dnssec-conf = 1.27-2
+BuildRequires:  gcc, make
 BuildRequires:  openssl-devel, libtool, autoconf, pkgconfig, libcap-devel
 BuildRequires:  libidn2-devel, libxml2-devel, GeoIP-devel
 BuildRequires:  systemd
@@ -148,6 +149,9 @@ BuildRequires:  libdb-devel
 %if %{with KYUA}
 # make unit dependencies
 BuildRequires:  libatf-c-devel kyua-cli
+%else
+# shipped atf library requires c++
+BuildRequires:  gcc-c++
 %endif
 %if %{with PKCS11}
 BuildRequires:  softhsm
@@ -1392,6 +1396,9 @@ rm -rf ${RPM_BUILD_ROOT}
 
 
 %changelog
+* Fri May 25 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-8
+- Require C++ on build when shipped atf library is used
+
 * Mon Apr 09 2018 Petr Menšík <pemensik@redhat.com> - 32:9.11.3-7
 - Run tests also without kyua