diff --git a/debian/bin/gencontrol.py b/debian/bin/gencontrol.py
index ae26722ce..84b40d571 100755
--- a/debian/bin/gencontrol.py
+++ b/debian/bin/gencontrol.py
@@ -575,6 +575,10 @@ class Gencontrol(Base):
             makeflags['KCONFIG_OPTIONS'] += ' -o DEBUG_INFO=y'
         if build_signed:
             makeflags['KCONFIG_OPTIONS'] += ' -o MODULE_SIG=y'
+        # Add "salt" to fix #872263
+        makeflags['KCONFIG_OPTIONS'] += (' -o "BUILD_SALT=\\"%s%s\\""' %
+                                         (vars['abiname'],
+                                          vars['localversion']))
 
         cmds_binary_arch = ["$(MAKE) -f debian/rules.real binary-arch-flavour "
                             "%s" %
diff --git a/debian/changelog b/debian/changelog
index f53a089a7..9090c74c9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -7,6 +7,7 @@ linux (4.19~rc7-1~exp2) UNRELEASED; urgency=medium
   * debian/changelog: Move older entries to changelog.old
   * debian/rules: Checksum only the source name and version from
     debian/changelog
+  * Move generation of CONFIG_BUILD_SALT to gencontrol.py
 
   [ Karsten Merker ]
   * [riscv64] Build a kernel image and udebs for riscv64 (Closes: #908161)
diff --git a/debian/rules.real b/debian/rules.real
index 0ba830991..a2f339fed 100644
--- a/debian/rules.real
+++ b/debian/rules.real
@@ -180,8 +180,6 @@ $(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(STAMPS_DIR)/source_$(FEA
 	rm -rf '$(DIR)'
 	mkdir '$(DIR)'
 	cp '$(CONFIG)' '$(DIR)/.config'
-# Add "salt" to fix #872263
-	echo 'CONFIG_BUILD_SALT="$(ABINAME)$(LOCALVERSION_IMAGE)"' >> '$(DIR)/.config'
 	echo 'override ARCH = $(KERNEL_ARCH)' >> '$(DIR)/.kernelvariables'
 	echo 'override KERNELRELEASE = $(ABINAME)$(LOCALVERSION_IMAGE)' >> '$(DIR)/.kernelvariables'
 	echo 'CCACHE = ccache' >> '$(DIR)/.kernelvariables'