diff --git a/boot/zephyr/Kconfig b/boot/zephyr/Kconfig
index 49627e0..eafdb94 100644
--- a/boot/zephyr/Kconfig
+++ b/boot/zephyr/Kconfig
@@ -11,6 +11,7 @@
 config MCUBOOT
 	default y
 	bool
+	select MPU_ALLOW_FLASH_WRITE if ARM_MPU
 
 config BOOT_USE_MBEDTLS
 	bool
diff --git a/boot/zephyr/prj.conf b/boot/zephyr/prj.conf
index 11e778a..b6bf527 100644
--- a/boot/zephyr/prj.conf
+++ b/boot/zephyr/prj.conf
@@ -30,7 +30,6 @@
 # CONFIG_TINYCRYPT_SHA256 is not set
 
 CONFIG_FLASH=y
-CONFIG_MPU_ALLOW_FLASH_WRITE=y
 
 CONFIG_MULTITHREADING=n