diff --git a/freeipa.spec b/freeipa.spec
index 588ea5b..01090d8 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -6,9 +6,13 @@
 %global gettext_domain ipa
 %global VERSION 3.3.4
 
+%if (0%{?fedora} > 15 || 0%{?rhel} >= 7)
+%define _hardened_build 1
+%endif
+
 Name:           freeipa
 Version:        3.3.4
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 Group:          System Environment/Base
@@ -921,6 +925,9 @@ fi
 %endif # ONLY_CLIENT
 
 %changelog
+* Wed Jan 29 2014 Martin Kosek <mkosek@redhat.com> - 3.3.4-2
+- Fix hardened build
+
 * Tue Jan 28 2014 Martin Kosek <mkosek@redhat.com> - 3.3.4-1
 - Update to upstream 3.3.4
 - Install CA anchor into standard location (#928478)