diff --git a/device/testing/linux-postmarketos-asahi/APKBUILD b/device/testing/linux-postmarketos-asahi/APKBUILD
index 9accbfe88..8a7940aa8 100644
--- a/device/testing/linux-postmarketos-asahi/APKBUILD
+++ b/device/testing/linux-postmarketos-asahi/APKBUILD
@@ -1,6 +1,6 @@
 maintainer="Clayton Craft <clayton@craftyguy.net>"
 pkgname=linux-postmarketos-asahi
-pkgver=7.1.9_p1
+pkgver=7.1.10_p1
 pkgrel=0
 _rel=${pkgver#*_p}
 _kver=${pkgver%_p*}
@@ -17,6 +17,9 @@ options="!strip
 	!tracedeps
 	pmb:cross-native
 	pmb:kconfigcheck-community
+	pmb:kconfigcheck-lockdown
+	pmb:kconfigcheck-rust
+	pmb:kconfigcheck-selinux
 	pmb:kconfigcheck-uefi
 	pmb:kconfigcheck-virt
 "
@@ -87,7 +90,7 @@ package() {
 }
 
 sha512sums="
-86820081776dc1d1114dbe64cf0599d8b5e45bfccd89d3600999023bad43f7f8ec5ff4ddb28bf3b10215537c809d3c1261e6b834f3ce23fcee3ceff22b252870  linux-postmarketos-asahi-7.1.9-1.tar.gz
-601a717ccd8d7e4ab6b01ff03defbc2611ceded5d24906c93f75e8df25cef186e9eb32530fcae07160802bedc3c5b06f8290ad27bf27b789c37faabea629fd10  config-postmarketos-asahi.aarch64
+de0ac7bffbd301b8c69264df3ac3268f69beba63a479d8d8adbe04a9803999cddbb9437ef77bcb350deb7995903619d50cff6c7031159b1958567554a6fd52c2  linux-postmarketos-asahi-7.1.10-1.tar.gz
+2b2a2edae121c6053395f0a017c818c1741527d90bc277ac1fef36a4e10d4f75cbe3277acf4f28157d3d49852de95ad962b720b6235a617b154311916d9e7433  config-postmarketos-asahi.aarch64
 e8b595f3e076896dc38f249c8908d58e2e6a858eaa77fe1e680f27db0e76d3d74c0b5dfebb7a4c57d546fee0b0f6eb81a38b20dfd72f985c9d02f28d79a5eceb  enable-dynamic-ftrace.patch
 "
diff --git a/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64 b/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64
index abf7c7f12..af6dedbaf 100644
--- a/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64
+++ b/device/testing/linux-postmarketos-asahi/config-postmarketos-asahi.aarch64
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/arm64 7.1.9 Kernel Configuration
+# Linux/arm64 7.1.10 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="Alpine clang version 22.1.8"
 CONFIG_GCC_VERSION=0
@@ -1247,7 +1247,7 @@ CONFIG_IPV6_MULTIPLE_TABLES=y
 # CONFIG_IPV6_IOAM6_LWTUNNEL is not set
 # CONFIG_NETLABEL is not set
 # CONFIG_MPTCP is not set
-# CONFIG_NETWORK_SECMARK is not set
+CONFIG_NETWORK_SECMARK=y
 CONFIG_NET_PTP_CLASSIFY=y
 # CONFIG_NETWORK_PHY_TIMESTAMPING is not set
 CONFIG_NETFILTER=y
@@ -1271,6 +1271,7 @@ CONFIG_NETFILTER_BPF_LINK=y
 CONFIG_NF_CONNTRACK=m
 CONFIG_NF_LOG_SYSLOG=m
 CONFIG_NF_CONNTRACK_MARK=y
+# CONFIG_NF_CONNTRACK_SECMARK is not set
 # CONFIG_NF_CONNTRACK_ZONES is not set
 # CONFIG_NF_CONNTRACK_PROCFS is not set
 CONFIG_NF_CONNTRACK_EVENTS=y
@@ -1352,6 +1353,7 @@ CONFIG_NETFILTER_XT_TARGET_MASQUERADE=m
 # CONFIG_NETFILTER_XT_TARGET_TEE is not set
 # CONFIG_NETFILTER_XT_TARGET_TPROXY is not set
 # CONFIG_NETFILTER_XT_TARGET_TRACE is not set
+# CONFIG_NETFILTER_XT_TARGET_SECMARK is not set
 CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
 # CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP is not set
 
@@ -8941,9 +8943,18 @@ CONFIG_PROC_MEM_FORCE_PTRACE=y
 CONFIG_SECURITY=y
 CONFIG_HAS_SECURITY_AUDIT=y
 CONFIG_SECURITYFS=y
-# CONFIG_SECURITY_NETWORK is not set
+CONFIG_SECURITY_NETWORK=y
 CONFIG_SECURITY_PATH=y
+CONFIG_LSM_MMAP_MIN_ADDR=32768
 # CONFIG_STATIC_USERMODEHELPER is not set
+CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_SELINUX_BOOTPARAM=y
+CONFIG_SECURITY_SELINUX_DEVELOP=y
+CONFIG_SECURITY_SELINUX_AVC_STATS=y
+CONFIG_SECURITY_SELINUX_SIDTAB_HASH_BITS=9
+CONFIG_SECURITY_SELINUX_SID2STR_CACHE_SIZE=256
+CONFIG_SECURITY_SELINUX_AVC_HASH_BITS=9
+# CONFIG_SECURITY_SELINUX_DEBUG is not set
 # CONFIG_SECURITY_SMACK is not set
 # CONFIG_SECURITY_TOMOYO is not set
 # CONFIG_SECURITY_APPARMOR is not set
@@ -8952,8 +8963,8 @@ CONFIG_SECURITY_YAMA=y
 # CONFIG_SECURITY_SAFESETID is not set
 CONFIG_SECURITY_LOCKDOWN_LSM=y
 CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
-CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
-# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
+# CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE is not set
+CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
 # CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
 # CONFIG_SECURITY_LANDLOCK is not set
 # CONFIG_SECURITY_IPE is not set
@@ -8963,7 +8974,8 @@ CONFIG_INTEGRITY_AUDIT=y
 # CONFIG_IMA is not set
 # CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
 # CONFIG_EVM is not set
-CONFIG_DEFAULT_SECURITY_DAC=y
+CONFIG_DEFAULT_SECURITY_SELINUX=y
+# CONFIG_DEFAULT_SECURITY_DAC is not set
 CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,selinux,smack,tomoyo,ipe,bpf"
 
 #
diff --git a/device/testing/linux-postmarketos-asahi/pmos.config b/device/testing/linux-postmarketos-asahi/pmos.config
index 1f8344065..b483cd29d 100644
--- a/device/testing/linux-postmarketos-asahi/pmos.config
+++ b/device/testing/linux-postmarketos-asahi/pmos.config
@@ -516,5 +516,19 @@ CONFIG_CFI=y
 # CONFIG_CFI_PERMISSIVE is not set
 CONFIG_CFI_ICALL_NORMALIZE_INTEGERS=y
 
+# rust
+CONFIG_RUST=y
+# CONFIG_MODVERSIONS is not set
+
+# selinux
+CONFIG_AUDIT=y
+CONFIG_DEFAULT_SECURITY_SELINUX=y
+CONFIG_SECURITY_NETWORK=y
+CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_SELINUX_BOOTPARAM=y
+
+# lockdown
+CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY=y
+
 # wine
 CONFIG_NTSYNC=m