diff --git a/recipes-kernel/linux/linux-yocto-dev.bbappend b/recipes-kernel/linux/linux-yocto-dev.bbappend
index b6a63d7b7b29..94bf737c63bd 100644
--- a/recipes-kernel/linux/linux-yocto-dev.bbappend
+++ b/recipes-kernel/linux/linux-yocto-dev.bbappend
@@ -2,4 +2,5 @@ FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
 
 COMPATIBLE_MACHINE:orangepi-5-plus = "orangepi-5-plus"
 
+SRC_URI:append = " file://disable-some-fs-security.cfg"
 SRC_URI:append:orangepi-5-plus = " file://rockchip-kmeta;type=kmeta;name=rockchip-kmeta;destsuffix=rockchip-kmeta"
diff --git a/recipes-kernel/linux/linux-yocto-dev/disable-some-fs-security.cfg b/recipes-kernel/linux/linux-yocto-dev/disable-some-fs-security.cfg
new file mode 100644
index 000000000000..dd2e894eed76
--- /dev/null
+++ b/recipes-kernel/linux/linux-yocto-dev/disable-some-fs-security.cfg
@@ -0,0 +1,5 @@
+CONFIG_SECURITYFS=n
+CONFIG_SECURITY_NETWORK=y
+CONFIG_SECURITY_NETWORK_XFRM=n
+CONFIG_SECURITY_PATH=y
+CONFIG_SECURITY_LANDLOCK=y