diff --git a/docs/mount.md b/docs/mount.md
index 255fa230468..78265ee00c0 100644
--- a/docs/mount.md
+++ b/docs/mount.md
@@ -59,7 +59,8 @@ mounts:
 - location: "~"
   9p:
     # Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none".
-    # 🟢 Builtin default: "mapped-xattr"
+    # "mapped-xattr" and "mapped-file" are useful for persistent chown but incompatible with symlinks.
+    # 🟢 Builtin default: "none" (since Lima v0.13)
     securityModel: null
     # Select 9P protocol version. Valid options are: "9p2000" (legacy), "9p2000.u", "9p2000.L".
     # 🟢 Builtin default: "9p2000.L"
diff --git a/examples/default.yaml b/examples/default.yaml
index 08dcd204b4f..a209fd6a663 100644
--- a/examples/default.yaml
+++ b/examples/default.yaml
@@ -69,7 +69,8 @@ mounts:
     sftpDriver: null
   9p:
     # Supported security models are "passthrough", "mapped-xattr", "mapped-file" and "none".
-    # 🟢 Builtin default: "mapped-xattr"
+    # "mapped-xattr" and "mapped-file" are useful for persistent chown but incompatible with symlinks.
+    # 🟢 Builtin default: "none" (since Lima v0.13)
     securityModel: null
     # Select 9P protocol version. Valid options are: "9p2000" (legacy), "9p2000.u", "9p2000.L".
     # 🟢 Builtin default: "9p2000.L"
diff --git a/pkg/limayaml/defaults.go b/pkg/limayaml/defaults.go
index 3e3846e365e..0a8eae3aec6 100644
--- a/pkg/limayaml/defaults.go
+++ b/pkg/limayaml/defaults.go
@@ -20,7 +20,9 @@ import (
 )
 
 const (
-	Default9pSecurityModel   string = "mapped-xattr"
+	// Default9pSecurityModel is "none" for supporting symlinks
+	// https://gitlab.com/qemu-project/qemu/-/issues/173
+	Default9pSecurityModel   string = "none"
 	Default9pProtocolVersion string = "9p2000.L"
 	Default9pMsize           string = "128KiB"
 	Default9pCacheForRO      string = "fscache"