diff --git a/kconfigcheck.toml b/kconfigcheck.toml
index d478c37da..8a7bef431 100644
--- a/kconfigcheck.toml
+++ b/kconfigcheck.toml
@@ -638,6 +638,9 @@ EFIVAR_FS = "m"
 ["category:immutable".">=0.0.0"."all"]
 DM_VERITY = "m"
 
+["category:hardening".">=0.0.0"."all"]
+SECURITY_DMESG_RESTRICT = "y"
+
 # In 6.18+, CFI_CLANG is CFI
 ["category:hardening".">=6.18_rc1"."x86_64 aarch64 armv7 riscv64"]
 CFI = "y"