From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pf1-f171.google.com (mail-pf1-f171.google.com [209.85.210.171]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C291D3446A7 for ; Thu, 2 Jul 2026 18:36:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=pass smtp.client-ip=209.85.210.171 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783017396; cv=pass; b=s7lSTGysM792t7fXe2sJVZ4BguxOZxJzxt8iFfsNT01VQ2GVZ+yweoMihwxwFnk3qh5a/zc448Lz5bpHFggzQm1xqi3uI5VUp0wPefL1wkSg9gzusj+XWp0ai8zObtMTCXMjkYcz+PIDm0FcxcpHUZEZ0mXPZAsAWYbd4pRGUBk= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783017396; c=relaxed/simple; bh=PCLOCX/Eob7+UKaMpmopGS629KwyCWVOuoZRf07w48Q=; h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject: To:Cc:Content-Type; b=Y91cd0h12Akrh4rXQrQsVGsChwlp68we54IV+ZlTdtiV9Xsf9hyNW99mSK0x4eUuTGfxnlbavEBQADAqgqh1hSuhwwG9TTRUqYrLT+J4dYWFRLmuUXxt4HGqwN1YKYUAiyqW0SnEbliarEfaMNt2KposRCMz/2bjyJzQHKx2mOM= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=RBNjGbk8; arc=pass smtp.client-ip=209.85.210.171 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="RBNjGbk8" Received: by mail-pf1-f171.google.com with SMTP id d2e1a72fcca58-8454160043aso1839429b3a.3 for ; Thu, 02 Jul 2026 11:36:33 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1783017393; cv=none; d=google.com; s=arc-20260327; b=qLDhpcjpOkwOGfqT+uWP+TcSdsECiD+hKkIfM0hyw1j8utRmV/JYl/L3qCwAikeqNJ BoH+VaSb5Jwzz9RLrSA580fV3EBOPMQ3QEZRGGi3jVt8b1rVqnFaoX5IqxVymr3XUHtF NCB6SN2SQVmUgiHkx0/Jldi2/wfvSA/eNZMJAcguHifYDk2dw2H3Ko7u9WXGYUaz4U2h v1RruSXtA7m8bqjiLK38RuZ1YX6j19x3NR8PWbF869X9coSRiHFvnpfX/CRcZpYKB31o SjpMIRQVdqWbfM6lrH3c+L5AyaWIrYv+8vK3n8beuzZ+1pobRdDaPykI6c9sU+pqRgEH jV5g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=NEhwGG3IOip9xw+ht5KLaONZ3M052iL+ytO4+Vh6eQQ=; fh=5gGqx/nGZgDaVuwmpS4ImmVRyxXhEM5Qz/URuxneRJA=; b=c0qG9tbwaM1Rhe6ORPjsApjxBXzugOdT/6sDNkZs1+lzykaGmVYkwe0IUVJ9PBk2uH 15bDAlra3CGxabmSJtwNrIJxbrR69eW+mIFQnmEsi3DozRg/+qJHe7x69n07igkx6dt7 5FngBQA1xjcodU5yQEXpZUhFJWTz8WjcvN/2u22NDB41Rn3V6gWGtyGY7TTVVW7AyfFE uv9hHeXnMcXV/UndMmsQ9kC2JyNjnl4wWUzLcw+HpPZk9KK46BsEx1asf+USVdTT0qdY qTLw1Ob3ka6PH4urV4nMWNnnQajlIquqgnYiJvfaHOKfW+1/z+VAalyI3M9aI7CXB6xc LySg==; darn=vger.kernel.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1783017393; x=1783622193; darn=vger.kernel.org; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:from:to:cc:subject :date:message-id:reply-to:content-type; bh=NEhwGG3IOip9xw+ht5KLaONZ3M052iL+ytO4+Vh6eQQ=; b=RBNjGbk8i5/xgotV+JBaOfWeSOdDiynADhSQxWoRRSQMuxEi3WdOU42fs9vBQhXdhs YhIy2A1PmuBEwa3TBr0qBITZpf0LKvvtbf/eB5s4gWWwd0NYZgDfsAQTQKQ1ELGhODDb phHTdWZlhuflWfxQU/nyzcyD08ql99iy9nv8tzdUXFDpxdkaVaM5DncklG0jbTd8xLuT YxcNAovY2kc/Eegyv7QE76FsbGUFLEGbGtD+CbbAJ5nGuocC4VOrChCE7REe3YMJk21S p4hB62b651Zz2ZgopsmHvXpOjofboKNNRId04EAbAg6tlW9Cme9+Woy+fBfomWyMi/1O 5MsA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783017393; x=1783622193; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=NEhwGG3IOip9xw+ht5KLaONZ3M052iL+ytO4+Vh6eQQ=; b=FoAV8QAFCrPNF57EYTDZpDiBEMdv8JF8+ZwZeWBo8DzNaQlPrNb7awxx1ZiR1FRXmD ZDPPNeMQMxbsySRcQFG7SXSuszPv+zTtQuS/2hM6yMNTNsMGKtVByKHE4UyN7nycjGmC KaVHzgi10posEjYKGhqG9TAJycg1FFcPv470mf5uXjhCfQgUYvTHOuhkSWL6Z64zVAhF EM7Tllxjf2wKfeTONWMhuiP12UKU85R29tRclxixwxqYrnAJXnUEixwY/Fzn+1K92NxG 4PyPxDPWBqVTUfDXVOHogtnz+alTunDpdDGCI3MH3yK5obpZRpt45bGa/6RYljOCCq+C 8MYg== X-Forwarded-Encrypted: i=1; AHgh+Rp15TJ8X0SPvDKdqxx5UaCROIsB2zxtgpSSvyL3y8bEFev0TESuJ5lLhFPmdz4hiA+M3Q5sm8Dlgacuv5c=@vger.kernel.org X-Gm-Message-State: AOJu0YxJkd6gtealxrDioz8RDEzGL9hKRFrH3EgqRENCSGSjcycriqpt ldq0ON9GdMDejk0AzG35HhUnVXLWxQb1pSk1TX82bbTON8wJU2idr+xZ+PLPRSzU9YeiaC8Di2p h5lfnLaI51SDUyKABrPp2WKkf3ppxqINpu9oUEsoj1VZF5g3DqzL7OYy1 X-Gm-Gg: AfdE7cmADh75VDBJcA8ogYS+AioZQdl9HAKtLTbOg+lKxrep+PzLzVp3+omW90+EJ2P 6uEi4knr99hThFls+brzSrxBFWRkGkCEQz/+//VY90+W62araarQl1F263DsEramaEcSLs49l1F C2Ed2hR07rFaMg+fp3XTJmknmCLaW9w85JqwLBKSNARdP8cJi+8YeRUXAqGYA71l6N+MUak4uL0 aa2lS628A7ACV2CNDfzNBn6Kn5qKn1sEFynk/lLBpHrOlwmbTl5+isZOeGlSBbfPr883/G5 X-Received: by 2002:aa7:88c9:0:b0:845:dde9:ab62 with SMTP id d2e1a72fcca58-847c07a0812mr7482037b3a.19.1783017393051; Thu, 02 Jul 2026 11:36:33 -0700 (PDT) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 References: <20260605144325.434436-1-yeoreum.yun@arm.com> <20260605144325.434436-2-yeoreum.yun@arm.com> In-Reply-To: <20260605144325.434436-2-yeoreum.yun@arm.com> From: Paul Moore Date: Thu, 2 Jul 2026 14:36:21 -0400 X-Gm-Features: AVVi8CeOOyE2Od7gNJBo3j-LLr7BLyJYgunVuD-VezKTeBhB5ZlmzgqKWCJuEks Message-ID: Subject: Re: [PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init To: Yeoreum Yun , zohar@linux.ibm.com Cc: linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, linux-integrity@vger.kernel.org, roberto.sassu@huaweicloud.com, noodles@earth.li, jarkko@kernel.org, sudeep.holla@kernel.org, jmorris@namei.org, serge@hallyn.com, dmitry.kasatkin@gmail.com, eric.snowberg@oracle.com, jgg@ziepe.ca Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Jun 5, 2026 at 10:43=E2=80=AFAM Yeoreum Yun w= rote: > > There are situations where LSMs have dependencies that might mean they > want to be initialised later in the boot process, to ensure those > dependencies are available. In particular there are some TPM setups (Arm > FF-A devices, SPI attached TPMs) required by IMA which are not > guaranteed to be initialised for regular initcall_late. > > Add an initcall_late_sync option that can be used in these situations. > > Signed-off-by: Yeoreum Yun > --- > include/linux/lsm_hooks.h | 2 ++ > security/lsm_init.c | 13 +++++++++++-- > 2 files changed, 13 insertions(+), 2 deletions(-) Looks good to me, thanks for working on sorting this out. Acked-by: Paul Moore --=20 paul-moore.com