diff --git a/src/initscripts/system/mountkernfs b/src/initscripts/system/mountkernfs
index b660083ec..73e9ad03b 100644
--- a/src/initscripts/system/mountkernfs
+++ b/src/initscripts/system/mountkernfs
@@ -51,6 +51,11 @@ case "${1}" in
 			mount -t efivarfs efivarfs /sys/firmware/efi/efivars || failed=1
 		fi
 
+		if ! mountpoint /sys/kernel/security &>/dev/null && [ -d "/sys/kernel/security" ]; then
+			boot_mesg -n " /sys/kernel/security" ${NORMAL}
+			mount -n -t securityfs -o nosuid,nodev,noexec securityfs /sys/kernel/security || failed=1
+		fi
+
 		# create folder for dhcpcd changeroot
 		mkdir -p /run/dhcpcd/chroot
 		chown dhcpcd:dhcpcd /run/dhcpcd/chroot