harden the build

colord.spec

@@ -1,7 +1,7 @@
 Summary:   Color daemon
 Name:      colord
 Version:   0.1.26
-Release:   1%{?dist}
+Release:   2%{?dist}
 License:   GPLv2+ and LGPLv2+
 URL:       http://www.freedesktop.org/software/colord/
 Source0:   http://www.freedesktop.org/software/colord/releases/%{name}-%{version}.tar.xz
@@ -56,6 +56,10 @@ when running GTK applications.
 %setup -q
 
 %build
+# we can't use _hardened_build here, see
+# https://bugzilla.redhat.com/show_bug.cgi?id=892837
+export CFLAGS='-fPIC %optflags'
+export LDFLAGS='-pie -Wl,-z,now -Wl,-z,relro'
 %configure \
         --with-daemon-user=colord \
         --enable-gtk-doc \
@@ -133,6 +137,9 @@ exit 0
 %{_datadir}/gtk-doc/html/colord/*
 
 %changelog
+* Mon Jan  7 2013 Matthias Clasen <mclasen@redhat.com> 0.1.26-2
+- Enable hardened build
+
 * Wed Dec 19 2012 Richard Hughes <richard@hughsie.com> 0.1.26-1
 - New upstream version
 - Add a session helper that can be used to calibrate the screen