diff --git a/flake.nix b/flake.nix
index 866ed43..63f3528 100644
--- a/flake.nix
+++ b/flake.nix
@@ -46,7 +46,6 @@
 
             # Copy kernel modules
             cp -Pr ${self.packages.${system}.kernel.kernel}/lib/modules ./usr/lib/
-            find usr/lib/modules -type d -exec chmod 755 {} \;
 
             mkdir -p dev proc sys tmp root
             ln -sf usr/bin bin
diff --git a/kernel/generic.config b/kernel/generic.config
index 7e0325c..2073cdf 100644
--- a/kernel/generic.config
+++ b/kernel/generic.config
@@ -1397,6 +1397,14 @@ CONFIG_MMU=y
 CONFIG_MODPROBE_PATH="/sbin/modprobe"
 CONFIG_MODULE_COMPRESS_ZSTD=y
 CONFIG_MODULE_FORCE_UNLOAD=y
+CONFIG_MODULE_SIG_ALL=y
+CONFIG_MODULE_SIG_FORCE=y
+CONFIG_MODULE_SIG_FORMAT=y
+CONFIG_MODULE_SIG_HASH="sha512"
+CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
+CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
+CONFIG_MODULE_SIG_SHA512=y
+CONFIG_MODULE_SIG=y
 CONFIG_MODULE_SRCVERSION_ALL=y
 CONFIG_MODULE_UNLOAD=y
 CONFIG_MODULES_TREE_LOOKUP=y