diff --git a/config/rootfiles/core/97/update.sh b/config/rootfiles/core/97/update.sh
index 85131da83..a9ee78e5b 100644
--- a/config/rootfiles/core/97/update.sh
+++ b/config/rootfiles/core/97/update.sh
@@ -37,6 +37,9 @@ done
 # Extract files
 extract_files
 
+# Fix hardening flags in grub
+paxctl -mpexs /usr/bin/grub-script-check
+
 # Update Language cache
 # /usr/local/bin/update-lang-cache
 
diff --git a/lfs/grub b/lfs/grub
index 3e613a824..ba744087c 100644
--- a/lfs/grub
+++ b/lfs/grub
@@ -101,6 +101,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 
 	# Disable hardening.
 	paxctl -mpes /usr/sbin/grub-bios-setup /usr/sbin/grub-probe
+	paxctl -mpexs /usr/bin/grub-script-check
 
 	# We don't need to install unifont just to generate a grub2 compatible
 	# font archive for the graphical boot menu. The following command only