diff --git a/.SRCINFO b/.SRCINFO
index ed53ff6df13e..c5d39a45bd13 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -25,7 +25,7 @@ pkgbase = linux-cachyos-eevdf
 	source = config
 	source = https://raw.githubusercontent.com/cachyos/kernel-patches/master/6.17/all/0001-cachyos-base-all.patch
 	b2sums = 4999251820375def8ab39ea74fd62f08ca190a048b1cc431ec5dbe048d7f61f5af2d0b6264636d240f32bae64def9249287b6ebd31bf89ca047a75d193b5198d
-	b2sums = edd7bc06d5c2677e99f75b4a768e164dca8213925d6057f34376c0c6fb9039b8b77ed8314bdae404183ae702dcf2a3cc965cd8977ca9a36fa1ca657020dca729
+	b2sums = ae1f0f078130fc7223e913c919457ab8190e0be2ebdec1a5ff39a5ab67ca643c8fcfce4211d781b7862e5819278697bf8f86b39488a8192cf9e9feaafbecd0d6
 	b2sums = f0fb9a672719e268cbc4995e43ee04eee31c916e15c52c619174464a11363fb9911b489b9d09147f57f20de85ba68d9f801cbfc7dcd2c92679f745653982be63
 
 pkgname = linux-cachyos-eevdf
diff --git a/PKGBUILD b/PKGBUILD
index c593499d875f..b6b864c0c992 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -728,5 +728,5 @@ for _p in "${pkgname[@]}"; do
 done
 
 b2sums=('4999251820375def8ab39ea74fd62f08ca190a048b1cc431ec5dbe048d7f61f5af2d0b6264636d240f32bae64def9249287b6ebd31bf89ca047a75d193b5198d'
-        'edd7bc06d5c2677e99f75b4a768e164dca8213925d6057f34376c0c6fb9039b8b77ed8314bdae404183ae702dcf2a3cc965cd8977ca9a36fa1ca657020dca729'
+        'ae1f0f078130fc7223e913c919457ab8190e0be2ebdec1a5ff39a5ab67ca643c8fcfce4211d781b7862e5819278697bf8f86b39488a8192cf9e9feaafbecd0d6'
         'f0fb9a672719e268cbc4995e43ee04eee31c916e15c52c619174464a11363fb9911b489b9d09147f57f20de85ba68d9f801cbfc7dcd2c92679f745653982be63')
diff --git a/config b/config
index 9f537fff4561..9ee8598c0b4d 100644
--- a/config
+++ b/config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Linux/x86 6.17.1 Kernel Configuration
+# Linux/x86 6.17.4 Kernel Configuration
 #
 CONFIG_CC_VERSION_TEXT="gcc (GCC) 15.2.1 20250813"
 CONFIG_CC_IS_GCC=y
@@ -13,7 +13,7 @@ CONFIG_LD_VERSION=24500
 CONFIG_LLD_VERSION=0
 CONFIG_RUSTC_VERSION=109000
 CONFIG_RUST_IS_AVAILABLE=y
-CONFIG_RUSTC_LLVM_VERSION=200108
+CONFIG_RUSTC_LLVM_VERSION=210103
 CONFIG_CC_CAN_LINK=y
 CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
 CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
@@ -11532,7 +11532,13 @@ CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=1024
 CONFIG_SECURITY_TOMOYO_POLICY_LOADER="/usr/bin/tomoyo-init"
 CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER="/usr/lib/systemd/systemd"
 # CONFIG_SECURITY_TOMOYO_INSECURE_BUILTIN_SETTING is not set
-# CONFIG_SECURITY_APPARMOR is not set
+CONFIG_SECURITY_APPARMOR=y
+# CONFIG_SECURITY_APPARMOR_DEBUG is not set
+CONFIG_SECURITY_APPARMOR_INTROSPECT_POLICY=y
+CONFIG_SECURITY_APPARMOR_HASH=y
+CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
+CONFIG_SECURITY_APPARMOR_EXPORT_BINARY=y
+CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y
 CONFIG_SECURITY_LOADPIN=y
 CONFIG_SECURITY_LOADPIN_ENFORCE=y
 CONFIG_SECURITY_YAMA=y
@@ -11572,6 +11578,7 @@ CONFIG_INTEGRITY_AUDIT=y
 # CONFIG_DEFAULT_SECURITY_SELINUX is not set
 # CONFIG_DEFAULT_SECURITY_SMACK is not set
 # CONFIG_DEFAULT_SECURITY_TOMOYO is not set
+# CONFIG_DEFAULT_SECURITY_APPARMOR is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
 CONFIG_LSM="landlock,lockdown,yama,integrity,bpf"