diff --git a/alarm/kodi-rpi-git/PKGBUILD b/alarm/kodi-rpi-git/PKGBUILD
index 553e47a16..83ee08a33 100644
--- a/alarm/kodi-rpi-git/PKGBUILD
+++ b/alarm/kodi-rpi-git/PKGBUILD
@@ -120,7 +120,8 @@ build() {
   # uses here so unset them and redefine below
   unset CFLAGS CXXFLAGS
 
-  CFLAGS="-O2 -pipe -fstack-protector-strong -fno-plt"
+  CFLAGS="-O2 -pipe -fstack-protector-strong -fno-plt -fexceptions \
+    -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security -fstack-clash-protection"
   CXXFLAGS="${CFLAGS}"
 
   if [[ $CARCH = "armv7h" ]]; then