diff --git a/SPECS/sysstat.spec b/SPECS/sysstat.spec
index 0457b37..d1c681e 100644
--- a/SPECS/sysstat.spec
+++ b/SPECS/sysstat.spec
@@ -1,7 +1,7 @@
 Summary: Collection of performance monitoring tools for Linux
 Name: sysstat
 Version: 12.5.4
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: GPLv2+
 URL: http://sebastien.godard.pagesperso-orange.fr/
 Source: https://github.com/sysstat/sysstat/archive/v%{version}.tar.gz
@@ -39,6 +39,7 @@ The cifsiostat command reports I/O statistics for CIFS file systems.
 %autosetup -S git_am
 
 %build
+export CFLAGS="$RPM_OPT_FLAGS -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"
 %configure \
     --enable-install-cron \
     --enable-copy-only \
@@ -85,6 +86,9 @@ fi
 %{_localstatedir}/log/sa
 
 %changelog
+* Mon Feb 21 2021 Michal Sekletar <msekleta@redhat.com> 12.5.4-3
+- sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)
+
 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 12.5.4-2
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688