diff --git a/pkgs/additional/linux-postmarketos/default.nix b/pkgs/additional/linux-postmarketos/default.nix
index b4306fe9..20a08b66 100644
--- a/pkgs/additional/linux-postmarketos/default.nix
+++ b/pkgs/additional/linux-postmarketos/default.nix
@@ -61,6 +61,12 @@ let
     #
     CONFIG_DMIID=y
     CONFIG_IP_NF_MATCH_RPFILTER=y
+
+    #
+    # Extra sane-specific options
+    #
+    CONFIG_SECURITY_LANDLOCK=y
+    CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,apparmor,bpf";
   '';
 
 in linuxManualConfig {