diff --git a/vm/linux.config b/vm/linux.config
index 69abcd9..e0d84b4 100644
--- a/vm/linux.config
+++ b/vm/linux.config
@@ -38,6 +38,7 @@ CONFIG_HYPERV_VSOCKETS=y
 CONFIG_INET=y
 CONFIG_JBD2=y
 CONFIG_KALLSYMS=y
+CONFIG_LSM="landlock"
 CONFIG_MEMCG=y
 CONFIG_MISC_FILESYSTEMS=y
 CONFIG_MULTIUSER=y
@@ -54,6 +55,8 @@ CONFIG_PROC_FS=y
 CONFIG_PRINTK=y
 CONFIG_RD_ZSTD=y
 CONFIG_SECCOMP=y
+CONFIG_SECURITY=y
+CONFIG_SECURITY_LANDLOCK=y
 CONFIG_SERIAL_AMBA_PL011=y
 CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
 CONFIG_SCSI=y
diff --git a/vm/linux_x86_64.config b/vm/linux_x86_64.config
index 278a71f..030c583 100644
--- a/vm/linux_x86_64.config
+++ b/vm/linux_x86_64.config
@@ -37,6 +37,7 @@ CONFIG_JBD2=y
 CONFIG_KALLSYMS=y
 CONFIG_KERNEL_LZ4=y
 CONFIG_KVM_GUEST=y
+CONFIG_LSM="landlock"
 CONFIG_MEMCG=y
 CONFIG_MISC_FILESYSTEMS=y
 CONFIG_MULTIUSER=y
@@ -50,6 +51,8 @@ CONFIG_POSIX_TIMERS=y
 CONFIG_PROC_FS=y
 CONFIG_PRINTK=y
 CONFIG_SECCOMP=y
+CONFIG_SECURITY=y
+CONFIG_SECURITY_LANDLOCK=y
 CONFIG_SERIAL_8250=y
 CONFIG_SERIAL_8250_CONSOLE=y
 CONFIG_SIGNALFD=y