diff --git a/kconfigcheck.toml b/kconfigcheck.toml
index a3915c8ad..bd916b74d 100644
--- a/kconfigcheck.toml
+++ b/kconfigcheck.toml
@@ -648,6 +648,7 @@ DM_VERITY = "m"
 
 ["category:hardening".">=0.0.0"."all"]
 SECURITY_DMESG_RESTRICT = "y"
+SECURITY_YAMA = "y"
 
 # In 6.18+, CFI_CLANG is CFI
 ["category:hardening".">=6.18_rc1"."x86_64 aarch64 armv7 riscv64"]