diff --git a/bfd/ChangeLog b/bfd/ChangeLog
index de0738d8e087159bf456aba67693a4ae0d6feead..3a6b0d09a168e0c1bdf73895aaed854fb814bdb2 100644
--- a/bfd/ChangeLog
+++ b/bfd/ChangeLog
@@ -1,3 +1,8 @@
+2014-04-21  Richard Henderson  <rth@redhat.com>
+
+	* configure.ac (use_secureplt): Enable by default.
+	* configure: Rebuild.
+
 2014-04-18  Tristan Gingold  <gingold@adacore.com>
 
 	* mach-o.h (bfd_mach_o_dyld_info_command): Add rebase_content,
diff --git a/bfd/configure b/bfd/configure
index c5cb2a1e3fc9a2b15bc9b57adbe756831bbbce80..66161acab15e61057b4362774eb3f4e64d0004e8 100755
--- a/bfd/configure
+++ b/bfd/configure
@@ -12060,7 +12060,7 @@ if test "${enable_secureplt+set}" = set; then :
   *)    as_fn_error "bad value ${enableval} for secureplt option" "$LINENO" 5 ;;
 esac
 else
-  use_secureplt=false
+  use_secureplt=true
 fi
 if test $use_secureplt = true; then
 
diff --git a/bfd/configure.in b/bfd/configure.in
index af98f6276d2939493df747fb3e89fc9ee5be0045..9fab12fce2cc594e7ee950bae40e76413fc443b4 100644
--- a/bfd/configure.in
+++ b/bfd/configure.in
@@ -85,7 +85,7 @@ AC_ARG_ENABLE(secureplt,
   yes)  use_secureplt=true  ;;
   no)   use_secureplt=false ;;
   *)    AC_MSG_ERROR(bad value ${enableval} for secureplt option) ;;
-esac],[use_secureplt=false])dnl
+esac],[use_secureplt=true])dnl
 if test $use_secureplt = true; then
   AC_DEFINE(USE_SECUREPLT, 1,
     [Define if we should default to creating read-only plt entries])