diff --git a/ldns.spec b/ldns.spec
index b72c430..efaf9f0 100644
--- a/ldns.spec
+++ b/ldns.spec
@@ -24,7 +24,7 @@
 Summary: Low-level DNS(SEC) library with API
 Name: ldns
 Version: 1.6.17
-Release: 8%{?dist}
+Release: 9%{?dist}
 
 License: BSD
 Url: http://www.nlnetlabs.nl/%{name}/
@@ -193,6 +193,9 @@ make -C drill %{?_smp_mflags}
 make -C examples %{?_smp_mflags}
 make %{?_smp_mflags} doc
 
+# specfic hardening options should not end up in ldns-config
+sed -i "s/-Wl,-z,relro,-z,now -pie//" packaging/ldns-config
+
 %install
 rm -rf %{buildroot}
 
@@ -257,6 +260,9 @@ rm -rf %{buildroot}
 %doc doc
 
 %changelog
+* Wed Oct 01 2014 Paul Wouters <pwouters@redhat.com> - 1.6.17-9
+- Remove hardening options from ldns-config (rhbz#1147972)
+
 * Tue Sep 30 2014 Paul Wouters <pwouters@redhat.com> - 1.6.17-8
 - Fix ldns-config (rhbz#1147972) [Florian Lehner]