diff --git a/Dockerfile.openj9 b/Dockerfile.openj9
index 19f3535..8bf4479 100644
--- a/Dockerfile.openj9
+++ b/Dockerfile.openj9
@@ -24,7 +24,8 @@ RUN git clone --single-branch --depth 1 \
 
 WORKDIR /build/src
 RUN bash get_source.sh
-RUN bash configure --with-boot-jdk=/build/bootjdk --with-openssl=system
+
+RUN bash configure --with-boot-jdk=/build/bootjdk --with-openssl=system LDFLAGS="-Wl,-z,noexecstack"
 RUN make all JOBS=$(nproc)
 
 # jlink by advice from https://adoptium.net/blog/2021/10/jlink-to-produce-own-runtime/