lockdown: move initcalls to the LSM framework

Reviewed-by: Kees Cook <kees@kernel.org>
Acked-by: Xiu Jianfeng <xiujianfeng@huawei.com>
Reviewed-by: John Johansen <john.johhansen@canonical.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Paul Moore 2025-02-18 17:23:57 -05:00
parent 7cbe113537
commit 77ebff0607
1 changed files with 1 additions and 2 deletions

View File

@ -161,8 +161,6 @@ static int __init lockdown_secfs_init(void)
return PTR_ERR_OR_ZERO(dentry); return PTR_ERR_OR_ZERO(dentry);
} }
core_initcall(lockdown_secfs_init);
#ifdef CONFIG_SECURITY_LOCKDOWN_LSM_EARLY #ifdef CONFIG_SECURITY_LOCKDOWN_LSM_EARLY
DEFINE_EARLY_LSM(lockdown) = { DEFINE_EARLY_LSM(lockdown) = {
#else #else
@ -170,4 +168,5 @@ DEFINE_LSM(lockdown) = {
#endif #endif
.id = &lockdown_lsmid, .id = &lockdown_lsmid,
.init = lockdown_lsm_init, .init = lockdown_lsm_init,
.initcall_core = lockdown_secfs_init,
}; };