[PATCH V32 01/27] Add the ability to lock down access to the running kernel image

[Matthew Garrett]

Hi James,

What's the best way forward with this? I'm still not entirely clear on
how it can be implemented purely as an LSM, but if you have ideas on
what sort of implementation you'd prefer I'm happy to work on that.