diff --git a/modules/system/boot/stage-1-init.sh b/modules/system/boot/stage-1-init.sh
index 3f34a1ae6a54..cac7a1ceaa9d 100644
--- a/modules/system/boot/stage-1-init.sh
+++ b/modules/system/boot/stage-1-init.sh
@@ -65,7 +65,6 @@ mount -t sysfs none /sys
 mount -t devtmpfs -o "size=@devSize@" none /dev
 mkdir -p /run
 mount -t tmpfs -o "mode=0755,size=@runSize@" none /run
-mount -t securityfs none /sys/kernel/security
 
 # Process the kernel command line.
 export stage2Init=/init
diff --git a/modules/system/boot/stage-1.nix b/modules/system/boot/stage-1.nix
index 92386440dd87..f78a5dda2d3b 100644
--- a/modules/system/boot/stage-1.nix
+++ b/modules/system/boot/stage-1.nix
@@ -361,6 +361,5 @@ in {
   system.requiredKernelConfig = with config.lib.kernelConfig; [
     (isYes "TMPFS")
     (isYes "BLK_DEV_INITRD")
-    (isYes "SECURITYFS")
   ];
 }