Index: share/mk/bsd.lib.mk
===================================================================
--- share/mk/bsd.lib.mk
+++ share/mk/bsd.lib.mk
@@ -58,6 +58,8 @@
 CTFFLAGS+= -g
 .endif
 
+LDFLAGS+=	-Wl,-z,relro  -Wl,-z,now
+
 .include <bsd.libnames.mk>
 
 # prefer .s to a .c, add .po, remove stuff not used in the BSD libraries
Index: share/mk/bsd.prog.mk
===================================================================
--- share/mk/bsd.prog.mk
+++ share/mk/bsd.prog.mk
@@ -11,6 +11,8 @@
 CFLAGS+=${COPTS}
 .endif
 
+LDFLAGS+=	-Wl,-z,relro  -Wl,-z,now
+
 .if ${MK_ASSERT_DEBUG} == "no"
 CFLAGS+= -DNDEBUG
 NO_WERROR=