diff --git a/config-qubes b/config-qubes
index e62f016..29bce3c 100644
--- a/config-qubes
+++ b/config-qubes
@@ -129,6 +129,13 @@ CONFIG_USB_CONFIGFS_MASS_STORAGE=y
 CONFIG_USB_DUMMY_HCD=m
 
 
+################################################################################
+## Enable AppArmor
+## It's optionally used by Whonix (https://www.whonix.org/wiki/AppArmor).
+
+CONFIG_SECURITY_APPARMOR=y
+
+
 ################################################################################
 ## TODO: from diff to old config
 
@@ -139,7 +146,6 @@ CONFIG_USB_DUMMY_HCD=m
 ##
 ## CONFIG_X86_BOOTPARAM_MEMORY_CORRUPTION_CHECK=y
 ##
-## CONFIG_SECURITY_APPARMOR=y
 ## sensors from 0f976d972a1671a303fad30a5e690304b0b82ee0
 ##
 ## Intel ME driver e0f8e9ca81b80d897b190f48a4af80eff3198cb1