diff --git a/core/linux-rpi/PKGBUILD b/core/linux-rpi/PKGBUILD
index b4709a17b..fc1ead60b 100644
--- a/core/linux-rpi/PKGBUILD
+++ b/core/linux-rpi/PKGBUILD
@@ -10,7 +10,7 @@ _srcname=linux-${_commit}
 _kernelname=${pkgbase#linux}
 _regen=
 pkgver=6.6.51
-pkgrel=2
+pkgrel=3
 pkgdesc='Linux'
 url="https://github.com/raspberrypi/linux"
 arch=(armv7h aarch64)
@@ -36,8 +36,8 @@ md5sums=('c4e2925a6e9b1bf3261006c3bae13571'
          'a157c5bfc0f03d0728c92bd953b06265'
          '8b93b6ca167f70c60277f352f7b78024'
          '467709b52aff45a30b6e379e175026a9')
-md5sums_armv7h=('90168072c997c0afb92390ef659ecfa6')
-md5sums_aarch64=('928e6ccc6877eb28480abb2567ccb7e7')
+md5sums_armv7h=('c72353f5b06c1188d089f3f870788e96')
+md5sums_aarch64=('944e1b8dc8b661dd45c598da80998623')
 
 # setup vars
 if [[ $CARCH == "armv7h" ]]; then
diff --git a/core/linux-rpi/config b/core/linux-rpi/config
index 9dc60e58b..88dc26ffa 100644
--- a/core/linux-rpi/config
+++ b/core/linux-rpi/config
@@ -8199,7 +8199,7 @@ CONFIG_INTEGRITY_AUDIT=y
 # CONFIG_EVM is not set
 CONFIG_DEFAULT_SECURITY_APPARMOR=y
 # CONFIG_DEFAULT_SECURITY_DAC is not set
-CONFIG_LSM=""
+CONFIG_LSM="landlock"
 
 #
 # Kernel hardening options
diff --git a/core/linux-rpi/config8 b/core/linux-rpi/config8
index dddad11eb..d5c191ae9 100644
--- a/core/linux-rpi/config8
+++ b/core/linux-rpi/config8
@@ -8453,7 +8453,7 @@ CONFIG_INTEGRITY_AUDIT=y
 # CONFIG_EVM is not set
 CONFIG_DEFAULT_SECURITY_APPARMOR=y
 # CONFIG_DEFAULT_SECURITY_DAC is not set
-CONFIG_LSM=""
+CONFIG_LSM="landlock"
 
 #
 # Kernel hardening options