diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
index fbc9dea837d83f3c4f349ac64567e4ce2dab6f81..4aab4d5e9afc4cbfab075211ed39c59f7f8b6a94 100644
--- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
+++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig
@@ -6226,6 +6226,14 @@ CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
 # CONFIG_SECURITY_YAMA is not set
 # CONFIG_SECURITY_SAFESETID is not set
 # CONFIG_SECURITY_LOCKDOWN_LSM is not set
+
+#
+# executable permission manager
+#
+CONFIG_SECURITY_XPM=y
+CONFIG_SECURITY_XPM_DEBUG=y
+# end of executable permission manager
+
 CONFIG_INTEGRITY=y
 # CONFIG_INTEGRITY_SIGNATURE is not set
 CONFIG_INTEGRITY_AUDIT=y