Ah thanks, indeed bpf was appended only since SLE15-SP6, bsc#1219440. If adding selinux wouldn't lead to a significant regression, we can update CONFIG_LSM on SLE15-SP6 as well. i.e. CONFIG_LSM="integrity,apparmor,selinux,bpf" But I'm not 100% sure about it.