diff --git a/debian/changelog b/debian/changelog
index d8092170c..3ac36a012 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -58,6 +58,7 @@ linux (4.16-1~exp1) UNRELEASED; urgency=medium
     changelog
   * [x86,arm64] Enable code signing again
   * certs: Add certificate for test key used in Debian signing service
+  * integrity: Disable IMA until it works properly with lockdown
 
  -- Roger Shimizu <rogershimizu@gmail.com>  Fri, 23 Mar 2018 21:10:34 +0900
 
diff --git a/debian/config/config b/debian/config/config
index cf44d1513..30ef7f896 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -7135,7 +7135,8 @@ CONFIG_INTEGRITY_AUDIT=y
 ##
 ## file: security/integrity/ima/Kconfig
 ##
-CONFIG_IMA=y
+#. IMA + MODULE_SIG currently breaks module loading with finit_module()
+# CONFIG_IMA is not set
 ## choice: Default integrity hash algorithm
 # CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
 CONFIG_IMA_DEFAULT_HASH_SHA256=y