Re: [PATCH] LSM: allow loadable kernel module based LSM modules

[Paul Moore]

On Wed, Sep 4, 2024 at 3:10 AM Tetsuo Handa
<penguin-kernel@xxxxxxxxxxxxxxxxxxx> wrote:
>
> Until 2.6.23, it was officially possible to register/unregister LSM modules
> that are implemented as loadable kernel modules.

...

> Paul Moore has commented
>
>   I do not intentionally plan to make life difficult for the out-of-tree
>   LSMs, but if that happens as a result of design decisions intended to
>   benefit in-tree LSMs that is acceptable as far as I am concerned.

Patches that add complexity to the LSM framework without any benefit
to the upstream, in-tree LSMs, or the upstream kernel in general, are
not good candidates for inclusion in the upstream kernel.

-- 
paul-moore.com