[PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init

[Yeoreum Yun]

> On Fri, Jun 5, 2026 at 10:43 AM Yeoreum Yun <yeoreum.yun at arm.com> wrote:
> >
> > There are situations where LSMs have dependencies that might mean they
> > want to be initialised later in the boot process, to ensure those
> > dependencies are available. In particular there are some TPM setups (Arm
> > FF-A devices, SPI attached TPMs) required by IMA which are not
> > guaranteed to be initialised for regular initcall_late.
> >
> > Add an initcall_late_sync option that can be used in these situations.
> >
> > Signed-off-by: Yeoreum Yun <yeoreum.yun at arm.com>
> > ---
> >  include/linux/lsm_hooks.h |  2 ++
> >  security/lsm_init.c       | 13 +++++++++++--
> >  2 files changed, 13 insertions(+), 2 deletions(-)
> 
> Looks good to me, thanks for working on sorting this out.
> 
> Acked-by: Paul Moore <paul at paul-moore.com>

Thanks!

> 
> -- 
> paul-moore.com

-- 
Sincerely,
Yeoreum Yun