/usr/sbin/bat in bacula-console-bat-9.0.7-3.fc28.x86_64 has not been linked with the standard Fedora linker flags (LDFLAGS) in redhat-rpm-config.  Specifically, it is not PIE/a full ASLR executable, and the BIND_NOW flag is not used.

The libtool invocation looks like this:

/builddir/build/BUILD/bacula-9.0.7/libtool --silent --tag=CXX --mode=link g++ -Wl,-O1 -o bat obj/main.o obj/bat_conf.o obj/mainwin.o obj/qstd.o obj/pages.o obj/dircomm.o obj/dircomm_auth.o obj/console.o obj/prerestore.o obj/restore.o obj/brestore.o obj/label.o obj/relabel.o obj/mount.o obj/run.o obj/runcmd.o obj/estimate.o obj/prune.o obj/select.o obj/textinput.o obj/medialist.o obj/mediaview.o obj/mediaedit.o obj/joblist.o obj/clients.o obj/storage.o obj/content.o obj/fileset.o obj/joblog.o obj/job.o obj/jobs.o obj/restoretree.o obj/help.o obj/mediainfo.o obj/dirstat.o obj/clientstat.o obj/storstat.o obj/fmtwidgetitem.o obj/comboutil.o obj/qrc_main.o obj/moc_mainwin.o obj/moc_pages.o obj/moc_dircomm.o obj/moc_console.o obj/moc_restore.o obj/moc_label.o obj/moc_relabel.o obj/moc_mount.o obj/moc_run.o obj/moc_select.o obj/moc_textinput.o obj/moc_medialist.o obj/moc_mediaview.o obj/moc_mediaedit.o obj/moc_joblist.o obj/moc_clients.o obj/moc_storage.o obj/moc_content.o obj/moc_fileset.o obj/moc_joblog.o obj/moc_job.o obj/moc_jobs.o obj/moc_restoretree.o obj/moc_help.o obj/moc_mediainfo.o obj/moc_dirstat.o obj/moc_clientstat.o obj/moc_storstat.o   -L../lib -lbaccfg -lbac -L../findlib -lbacfind -lssl -lcrypto -lQt5Widgets -lQt5Gui -lQt5Core -lGL -lpthread 

Since all flags from LDFLAGS are missing, this looks more like a Bacula-specific makefile problem then the generic libtool issue.