diff --git a/common/environment/configure/build-pie.sh b/common/environment/configure/build-pie.sh
index d083c6b762..d71cba3c4e 100644
--- a/common/environment/configure/build-pie.sh
+++ b/common/environment/configure/build-pie.sh
@@ -3,5 +3,6 @@ _GCCSPECSDIR=${XBPS_COMMONDIR}/environment/configure/gccspecs
 if [ -n "$build_pie" ]; then
 	CFLAGS+=" -specs=$_GCCSPECSDIR/hardened-cc1"
 	CXXFLAGS+=" -specs=$_GCCSPECSDIR/hardened-cc1"
-	LDFLAGS+=" -specs=$_GCCSPECSDIR/hardened-ld"
+	# We pass -z relro -z now here too, because libtool drops -specs...
+	LDFLAGS+=" -specs=$_GCCSPECSDIR/hardened-ld -Wl,-z,relro -Wl,-z,now"
 fi