diff --git a/CMakeLists.txt b/CMakeLists.txt
index bac11f6..ae561bb 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -78,8 +78,10 @@ if(NOT CMAKE_BUILD_TYPE STREQUAL Debug)
 endif()
 
 if(NOT APPLE)
-  target_link_options(${PROJECT_NAME} PRIVATE
-                      LINKER:--version-script=${CMAKE_SOURCE_DIR}/linker.map)
+  target_link_options(
+    ${PROJECT_NAME} PRIVATE
+    LINKER:--version-script=${CMAKE_SOURCE_DIR}/linker.map
+    LINKER:-z,relro,-z,now,-z,noexecstack)
 endif()
 
 add_library(${PROJECT_NAME}-static STATIC