diff --git a/src/boot/efi/meson.build b/src/boot/efi/meson.build
index ae3f53a044..eb90efe68d 100644
--- a/src/boot/efi/meson.build
+++ b/src/boot/efi/meson.build
@@ -244,6 +244,7 @@ efi_ldflags = [
         '-Wl,--warn-common',
         '-Wl,-Bsymbolic',
         '-z', 'nocombreloc',
+        '-z', 'noexecstack',
         efi_crt0,
 ]