Re: [PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init
Yeoreum Yun <[email protected]> Thu, 2 Jul 2026 20:42:32 +0100
| Newsgroups | org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel,org.kernel.vger.linux-security-module |
|---|---|
| Message-ID | <[email protected]> |
> On Fri, Jun 5, 2026 at 10:43 AM Yeoreum Yun <[email protected]> wrote: > > > > There are situations where LSMs have dependencies that might mean they > > want to be initialised later in the boot process, to ensure those > > dependencies are available. In particular there are some TPM setups (Arm > > FF-A devices, SPI attached TPMs) required by IMA which are not > > guaranteed to be initialised for regular initcall_late. > > > > Add an initcall_late_sync option that can be used in these situations. > > > > Signed-off-by: Yeoreum Yun <[email protected]> > > --- > > include/linux/lsm_hooks.h | 2 ++ > > security/lsm_init.c | 13 +++++++++++-- > > 2 files changed, 13 insertions(+), 2 deletions(-) > > Looks good to me, thanks for working on sorting this out. > > Acked-by: Paul Moore <[email protected]> Thanks! > > -- > paul-moore.com -- Sincerely, Yeoreum Yun