diff --git a/squid.spec b/squid.spec
index 70aea87..00bfc66 100644
--- a/squid.spec
+++ b/squid.spec
@@ -4,7 +4,7 @@
 
 Name:     squid
 Version:  3.2.9
-Release:  1%{?dist}
+Release:  2%{?dist}
 Summary:  The Squid proxy caching server
 Epoch:    7
 # See CREDITS for breakdown of non GPLv2+ code
@@ -115,7 +115,7 @@ The squid-sysvinit contains SysV initscritps support.
    CXXFLAGS="$RPM_OPT_FLAGS -fpie" \
    CFLAGS="$RPM_OPT_FLAGS -fpie" \
 %endif
-LDFLAGS="$RPM_LD_FLAGS -pie"
+LDFLAGS="$RPM_LD_FLAGS -pie -Wl,-z,relro -Wl,-z,now"
 
 %configure \
    --disable-strict-error-checking \
@@ -309,6 +309,9 @@ fi
         /sbin/chkconfig --add squid >/dev/null 2>&1 || :
 
 %changelog
+* Fri Apr 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-2
+- Enable full RELRO (-Wl,-z,relro -Wl,-z,now)
+
 * Tue Mar 19 2013 Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
 - Update to latest upstream version 3.2.9
 - Fixed: CVE-2013-1839