diff --git a/config_for_secure_g++ b/config_for_secure_g++
new file mode 100644
index 0000000..9c3e852
--- /dev/null
+++ b/config_for_secure_g++
@@ -0,0 +1,3 @@
+rpm_name:wxGTK3
+sec_opt:-fPIC -D_FORTIFY_SOURCE=2 -O2 -Wtrampolines
+fs_opt:
diff --git a/wxGTK3.spec b/wxGTK3.spec
index 42a0bf2..4cbae48 100644
--- a/wxGTK3.spec
+++ b/wxGTK3.spec
@@ -111,7 +111,7 @@ sed -i -e 's|$CPPUNIT_CONFIG --version|$CPPUNIT_CONFIG --modversion|' configure
 %build
 CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
 CXXFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing"
-export LDFLAGS="-Wl,--as-needed"
+export LDFLAGS="-Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wl,--as-needed"
 export CPPUNIT_CONFIG="/usr/bin/pkg-config cppunit"
 
 %global _configure ../configure