On Wed, Sep 4, 2024 at 3:10 AM Tetsuo Handa <pengu****@i-lov*****> wrote: > > Until 2.6.23, it was officially possible to register/unregister LSM modules > that are implemented as loadable kernel modules. ... > Paul Moore has commented > > I do not intentionally plan to make life difficult for the out-of-tree > LSMs, but if that happens as a result of design decisions intended to > benefit in-tree LSMs that is acceptable as far as I am concerned. Patches that add complexity to the LSM framework without any benefit to the upstream, in-tree LSMs, or the upstream kernel in general, are not good candidates for inclusion in the upstream kernel. -- paul-moore.com