yama (and others) were enabled only in commit 720c38318edb68b138a4bc4c86bb8ff0fbcda672 Author: Jeff Mahoney <jeffm@suse.com> Date: Thu Dec 8 14:32:18 2022 -0500 config: update CONFIG_LSM defaults (bsc#1205603). via bug 1205603. I wonder how it came noone noticed until now?