diff --git a/debian/changelog b/debian/changelog
index 8d0d0185f..342c988a9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -57,6 +57,7 @@ linux (3.9.4-1) UNRELEASED; urgency=low
   * infiniband: Enable INFINIBAND_OCRDMA as module
   * [x86] vfio: Enable VFIO, VFIO_PCI as modules
   * [x86] hv: Enable HYPERV_BALLOON as module
+  * security: Enable SECURITY_YAMA, SECURITY_YAMA_STACKED (Closes: #704750)
 
   [ Aurelien Jarno ]
   * [mips] Enable KEXEC.
diff --git a/debian/config/config b/debian/config/config
index 3b4f23f72..a86618eca 100644
--- a/debian/config/config
+++ b/debian/config/config
@@ -4984,6 +4984,12 @@ CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
 ##
 CONFIG_SECURITY_TOMOYO=y
 
+##
+## file: security/yama/Kconfig
+##
+CONFIG_SECURITY_YAMA=y
+CONFIG_SECURITY_YAMA_STACKED=y
+
 ##
 ## file: sound/Kconfig
 ##