Re: [PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init

[Paul Moore]

On Mon, Jun 8, 2026 at 12:52 PM Mimi Zohar <zohar@xxxxxxxxxxxxx> wrote:
> On Fri, 2026-06-05 at 15:43 +0100, Yeoreum Yun wrote:
> > There are situations where LSMs have dependencies that might mean they
> > want to be initialised later in the boot process, to ensure those
> > dependencies are available. In particular there are some TPM setups (Arm
> > FF-A devices, SPI attached TPMs) required by IMA which are not
> > guaranteed to be initialised for regular initcall_late.
> >
> > Add an initcall_late_sync option that can be used in these situations.
> >
> > Signed-off-by: Yeoreum Yun <yeoreum.yun@xxxxxxx>
>
> Cc: Paul Moore <paul@xxxxxxxxxxxxxx>
>
> Jarkko has already queued 4/4.  Paul, can we get an Ack from you?

It's in my queue, but with the merge window opening next week, this is
definitely not suitable for the upcoming merge window, so it's not
near the top of my review list.

-- 
paul-moore.com