diff --git a/core/linux-rpi-16k/PKGBUILD b/core/linux-rpi-16k/PKGBUILD
index 39fe21e5b..44f627eeb 100644
--- a/core/linux-rpi-16k/PKGBUILD
+++ b/core/linux-rpi-16k/PKGBUILD
@@ -12,7 +12,7 @@ _srcname=linux-${_commit}
 _kernelname=${pkgbase#linux}
 _regen=
 pkgver=6.6.51
-pkgrel=2
+pkgrel=3
 pkgdesc='Linux'
 url="https://github.com/raspberrypi/linux"
 arch=(aarch64)
@@ -34,7 +34,7 @@ source=("linux-$pkgver-${_commit:0:10}.tar.gz::https://github.com/raspberrypi/li
 md5sums=('c4e2925a6e9b1bf3261006c3bae13571'
          '3bab7426d8c8818dda8353da3892a41f'
          '16c484af9f72b9275afcf83a6b8eab36'
-         '947de5f978d60092d2bd8ea93d534365'
+         '54024fb56dfcb573eaa4976b48898a86'
          'a157c5bfc0f03d0728c92bd953b06265'
          '8b93b6ca167f70c60277f352f7b78024'
          '80a999c7881015aca38e0be2ae5d41c0')
diff --git a/core/linux-rpi-16k/config8 b/core/linux-rpi-16k/config8
index e7e00571e..83f0ebb16 100644
--- a/core/linux-rpi-16k/config8
+++ b/core/linux-rpi-16k/config8
@@ -8453,7 +8453,7 @@ CONFIG_INTEGRITY_AUDIT=y
 # CONFIG_EVM is not set
 CONFIG_DEFAULT_SECURITY_APPARMOR=y
 # CONFIG_DEFAULT_SECURITY_DAC is not set
-CONFIG_LSM=""
+CONFIG_LSM="landlock"
 
 #
 # Kernel hardening options