diff --git a/travis-ci/vmtest/configs/blacklist/BLACKLIST-5.5.0 b/travis-ci/vmtest/configs/blacklist/BLACKLIST-5.5.0
index c4b3e7f..dd0ea64 100644
--- a/travis-ci/vmtest/configs/blacklist/BLACKLIST-5.5.0
+++ b/travis-ci/vmtest/configs/blacklist/BLACKLIST-5.5.0
@@ -1,20 +1,26 @@
 # PERMANENTLY DISABLED
 bpf_tcp_ca		# STRUCT_OPS is missing
 cgroup_attach_multi	# BPF_F_REPLACE_PROG missing
+cgroup_link		# LINK_CREATE is missing
 fentry_fexit		# bpf_prog_test_tracing missing
 fentry_test		# bpf_prog_test_tracing missing
 fexit_bpf2bpf		# freplace is missing
 fexit_test		# bpf_prog_test_tracing missing
+get_stack_raw_tp	# exercising BPF verifier bug causing infinite loop
 link_pinning		# bpf_link is missing
 modify_return		# fmod_ret is missing
 ns_current_pid_tgid	# bpf_get_ns_current_pid_tgid() helper is missing
 perf_branches		# bpf_read_branch_records() helper is missing
 select_reuseport	# UDP support is missing
+sk_assign		# bpf_sk_assign helper missing
 sockmap_listen		# no listen socket supportin SOCKMAP
 skb_ctx			# ctx_{size, }_{in, out} in BPF_PROG_TEST_RUN is missing
 test_global_funcs	# kernel doesn't support BTF linkage=global on FUNCs
+test_lsm		# no BPF_LSM support
 vmlinux			# hrtimer_nanosleep() signature changed incompatibly
+xdp_attach		# IFLA_XDP_EXPECTED_FD support is missing
 xdp_bpf2bpf		# freplace is missing
 
+
 # TEMPORARILY DISABLED
 send_signal		# flaky
diff --git a/travis-ci/vmtest/configs/blacklist/BLACKLIST-latest b/travis-ci/vmtest/configs/blacklist/BLACKLIST-latest
index c444fa9..30e48dc 100644
--- a/travis-ci/vmtest/configs/blacklist/BLACKLIST-latest
+++ b/travis-ci/vmtest/configs/blacklist/BLACKLIST-latest
@@ -1,2 +1,4 @@
 # TEMPORARILY DISABLED
 send_signal		# flaky
+test_lsm		# semi-working
+sk_assign		# needs better setup in Travis CI
diff --git a/travis-ci/vmtest/configs/latest.config b/travis-ci/vmtest/configs/latest.config
index d782b7c..26fca0e 100644
--- a/travis-ci/vmtest/configs/latest.config
+++ b/travis-ci/vmtest/configs/latest.config
@@ -2372,7 +2372,10 @@ CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS=y
 CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y
 # CONFIG_EVM is not set
 CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="selinux"
+CONFIG_LSM="selinux,bpf"
+CONFIG_BPF_LSM=y
+CONFIG_AUDIT=y
+CONFIG_SECURITY_SELINUX=y
 
 #
 # Kernel hardening options