FESCo requires some packages to use PIE and relro hardening by default. This page contains that list.
Other packages may enable this at the package maintainers option. See: Packaging:Guidelines#PIE
The following packages are required to use the _hardened_build rpm spec macro:
systemd mingetty udevd rsyslog abrtd NetworkManager ntpd acpid openssh gdm sendmail postfix exim
Please contact fesco with any additions or questions about this list: