diff --git a/rpminspect.yaml b/rpminspect.yaml
index d284158..27203e6 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -2,8 +2,6 @@
 inspections:
   # none of our compiled code has an ABI
   abidiff: off
-  # at present the wrong debuginfo files are being used to run this check
-  annocheck: off
   # the project does not use .desktop files
   desktop: off
   # the project uses no Java
@@ -20,3 +18,12 @@ debuginfo:
   # https://bugzilla.redhat.com/show_bug.cgi?id=2166149
   ignore:
     - /usr/lib/udev/stratis*
+
+annocheck:
+  # annocheck error:
+  # Hardened: <path>: FAIL: stack-prot test because stack protection
+  # deliberately disabled (function: call_fini)
+  # Seems to be a consequence of including glibc-static when fully static
+  # compilation occurs.
+  ignore:
+    - /usr/lib/udev/stratis*
diff --git a/stratisd.spec b/stratisd.spec
index a6a1b9d..69fd505 100644
--- a/stratisd.spec
+++ b/stratisd.spec
@@ -5,7 +5,7 @@
 
 Name:           stratisd
 Version:        3.5.1
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Daemon that manages block devices to create filesystems
 
 # ASL 2.0
@@ -155,6 +155,9 @@ a2x -f manpage docs/stratisd.txt
 %{_systemd_util_dir}/system-generators/stratis-setup-generator
 
 %changelog
+* Tue Feb 28 2023 Bryan Gurney <bgurney@redhat.com> - 3.5.1-3
+- Allow annocheck on rpminspect.yaml for non-static binaries
+
 * Mon Feb 20 2023 Bryan Gurney <bgurney@redhat.com> - 3.5.1-2
 - Add debuginfo ignore to rpminspect.yaml