diff --git a/cyrus-sasl.spec b/cyrus-sasl.spec
index f102981..a26f6e2 100644
--- a/cyrus-sasl.spec
+++ b/cyrus-sasl.spec
@@ -187,8 +187,6 @@ chmod -x include/*.h
 %patch48 -p1 -b .keytab
 
 %build
-CFLAGS="$RPM_OPT_FLAGS -fPIC"; export CFLAGS
-
 # Find Kerberos.
 krb5_prefix=`krb5-config --prefix`
 if test x$krb5_prefix = x%{_prefix} ; then
@@ -225,7 +223,8 @@ if test x"$LIB_DIR" != "x-L%{_libdir}"; then
         LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS
 fi
 
-CFLAGS="$CFLAGS $CPPFLAGS"; export CFLAGS
+CFLAGS="$CFLAGS $CPPFLAGS -fPIE"; export CFLAGS
+LDFLAGS="$LDFLAGS -pie -Wl,-z,now"; export LDFLAGS
 
 echo "$CFLAGS"
 echo "$CPPFLAGS"