diff --git a/pmb/config/__init__.py b/pmb/config/__init__.py
index af1c6afb..e5592d86 100644
--- a/pmb/config/__init__.py
+++ b/pmb/config/__init__.py
@@ -189,14 +189,17 @@ necessary_kconfig_options = {
     ">=0.0.0": {  # all versions
         "all": {  # all arches
             "ANDROID_PARANOID_NETWORK": False,
+            "AUDIT": True,
             "BLK_DEV_INITRD": True,
             "CGROUPS": True,
             "CRYPTO_XTS": True,
+            "DEFAULT_SECURITY_APPARMOR": True,
             "DEVTMPFS": True,
             "DM_CRYPT": True,
             "EXT4_FS": True,
             "KINETO_GAN": False,
             "PFT": False,
+            "SECURITY_APPARMOR": True,
             "SYSVIPC": True,
             "USE_VFB": False,
             "VT": True,
@@ -212,6 +215,11 @@ necessary_kconfig_options = {
         "armhf armv7 x86": {
             "LBDAF": True
         }
+    },
+    "<5.1": {
+        "all": {
+            "SECURITY_APPARMOR_BOOTPARAM_VALUE": True,
+        }
     }
 }