From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f181.google.com (mail-pl1-f181.google.com [209.85.214.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 83C1E3D8101 for ; Mon, 8 Jun 2026 17:24:53 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=pass smtp.client-ip=209.85.214.181 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780939495; cv=pass; b=icfgfXgS5UBpNqZOTPcX99BoHdgMsB4U+bduRBxodcGuujYgu26Yk2ZO8lGz7GA7jZQNqE9uCdFsrjeo2crNl18pz2li11bA1/wmSxnOcze4bHc9K6FS/+vFsbifoyxZgzEVrdoltd7ftkJZxD3/WcLLS7dAHhERnyQSk860pjE= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780939495; c=relaxed/simple; bh=7Kdsfq3M6NlEdFS2bnCUaBu5hUrHR4J7G1t7KNXfpvA=; h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject: To:Cc:Content-Type; b=ku8vY1Xyp921TS4Yk77GU9oaYkHVGiT9ivHqpX5mJtGXK8cKjU4lcTjki4/T6+dL4AiK45t9DGGPs/eHICZcvh+ZyI/WoiY+dPDN3DKS5DwsBZFVf4o/MgzQSEaXzXhZ9WPMselfBEU1cVlPShA3cuSFPeA3/KoFrmWObV40XV4= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=UjdtuYRP; arc=pass smtp.client-ip=209.85.214.181 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="UjdtuYRP" Received: by mail-pl1-f181.google.com with SMTP id d9443c01a7336-2bf20f6be6bso35451765ad.3 for ; Mon, 08 Jun 2026 10:24:53 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1780939493; cv=none; d=google.com; s=arc-20240605; b=OlEcb5d808F+J7S69FCftrjM4h9dW6vW0/p1x/KSnQiegvlFxOgQNb6p7KK19Tyb3T qxkjU6ULZNzORby7/vYh1VUUlzr0l9NVxljBnRv0gjvrElHVC5KDSEpzHqsk1Y3SBLkg JYdq7C7nlZAT2b4OVXX+EjZCA1vRQYG9Vt1n9/6FbMxBcvL5CLDo3LSZxdKvlaFxQGFU kUq/1U26K1CsiQg4N/i+QA1hCB+pxQHf4MtvMRiv1i08gQ6zpXXewdi8fBMWib9+1zSC jtYfbpPUl6D4gBhlcK+U7gOZlXkNvmXwimMblrhLdhOKwh+4neGc38iYKnwXulb6SdWq qmmw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=w8JBElMQXP5d/TECdOlZtQLDN+V90z369cEJsD7o/qY=; fh=Xh7fgsiSW1pxbi4tLsMZigcLzuMRYR+yQVFrD4XaNAg=; b=Iwh6yzJtPFHUZq92McJdRcla7cgB9K9hiVkK8mhtmKzKmCqNoowDBwSz9X6BY3CFgW yL1e9edD90pd2w3w7dn8qzl3FWPH235fUAQgPOtemqeS6dYQSvWVKYqe0Y5qpPWSO+Mb 6oDtXw77cIK1cn2NyT7q+IaB62sRJHqUuU1XyTvPJRH/IBvJ+pzWzEvoShgguFHAKlE5 KuFM45P5BJa1IRyp1E3OJWUZUgN+ZzDo/Hh9LbcbF84x/vqZoN8mxDaZ7rs0p6CMDhr7 NWElqh2ad5b2DwgdTTJoqiZKzr3Tci5AMHdBV3Y10Q8IgJkiw6YBp8suxzzXjl8Tr6oM iy/A==; darn=vger.kernel.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1780939493; x=1781544293; darn=vger.kernel.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=w8JBElMQXP5d/TECdOlZtQLDN+V90z369cEJsD7o/qY=; b=UjdtuYRPGjEVXBKOpyPMtogry1A7fN8YZtfbTK0gMFZyn052WbGsC1pBoKedD7hRXy WQe1hi3y2V+lYX/brFW3Q3036PAvrM8VGaWqWeYNhedRyX2JaHVm/iBlrNX4vCrDDo1J A298VqNwayOkk/IyTcOW4e8D0szLstksa3Qwhx4Q1AJ0nBGr4V0E4ZOOTSfMmckA7fiS bOJ8CDik94EWq6aaUjjcR2i8vToW4eEIN/sCP6fHLH1/3JKJh0b792s26XjVgFyLvLrn nNbjYXCVkGOQesztAdcYDYUF5f+DjDs1hPghtp8F9ZEbSxTq8Csez3nIGfKhO/2etamo Vd/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780939493; x=1781544293; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=w8JBElMQXP5d/TECdOlZtQLDN+V90z369cEJsD7o/qY=; b=OH8PP3Hm4UeB+E3qakxDKQRACI5B1iCYHoSCGR+V6fYDpzmiz8/+O72y4HBX29v3so bqgTRGpzfX4LA1w1VT6c/e5F3ttp4o8IeE98S2fHjsI4q2lY+nShRHwhJj5v3DcFT10/ FVfCQMGfIbF8182YA5d+3Km/JlvzBDUkgvA9yne6t7mSWtHXKflF2p/MPIWEqQKX+/If hW5uFqwqU699RYAhc4uU3chrwrDccY8raf8gR9isaRcQ2sfA6htyxH5URpSc0HYQyvZm 4efvRt3Z+eO+ZJtNWnlGxkj3rjtTg6bMyCKQ2q8oRBXv6g0hLxhoeVD9hRjYB4mISq22 H7GA== X-Forwarded-Encrypted: i=1; AFNElJ81J589pXIDX0XgklP++hkmsZCXgxhUwYGCzwJRONHK9zs/cKGD5CbyiuxxHyWj1EkuiElDmjRZfUnox2g=@vger.kernel.org X-Gm-Message-State: AOJu0YwrdWZyOFuAXghZIdMmPoFBIfooMpsYj6pMGXheRrBv+i665ybv ff7plJYTID2NNEQSKDsok0MzOJaaE0cNQk18raYmQTrxZuIj9I1kNyGN1ZF5Hw1nj8tfDdLwbjj vVKgGm4CahVDdToX85as++HppMTjSckFmh0tej2un X-Gm-Gg: Acq92OG6JUp90IYHXWn3QWeMCX/7iuKRwiliHj+qNPDlrvhmHnetGmy9v5DAsnqXDNo p7ArvMqrWs0SAmOsiCKy3OlHhXDlFGyLHcOET9/OJuBD/DL44indGfcIdtPQN5OEnCWlszUU1ld hpXpxJ3yfw/MPvTe/2uosgzQ3pl70KhMgRLpaHt7Mp51FxaOp2211lrYk9MFmqPFmPsjK4tHk9A v6QlJBn8gbHIu8IcH/a9i8mnZziWnqIUdr4D3Hb3gLYeqoIt/kL0PZ49hOhZ11t2mU4BqZ1fq7S LJSfEx2TLpTAmRJc05w3MeUCDsDv X-Received: by 2002:a17:902:e88f:b0:2b0:b016:773f with SMTP id d9443c01a7336-2c1e7d3dba7mr185086165ad.11.1780939492837; Mon, 08 Jun 2026 10:24:52 -0700 (PDT) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 References: <20260605144325.434436-1-yeoreum.yun@arm.com> <20260605144325.434436-2-yeoreum.yun@arm.com> <9b499a2a3101cadcfdcd6fc32289f54df10fea80.camel@linux.ibm.com> In-Reply-To: <9b499a2a3101cadcfdcd6fc32289f54df10fea80.camel@linux.ibm.com> From: Paul Moore Date: Mon, 8 Jun 2026 13:24:40 -0400 X-Gm-Features: AVVi8Cc6U7pcPpqOawvLTIEb90w3WN1G1z-dXh4nwGP7pqUP53pA_Sp10Oyc5n4 Message-ID: Subject: Re: [PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init To: Mimi Zohar Cc: Yeoreum Yun , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, linux-integrity@vger.kernel.org, roberto.sassu@huaweicloud.com, noodles@earth.li, jarkko@kernel.org, sudeep.holla@kernel.org, jmorris@namei.org, serge@hallyn.com, dmitry.kasatkin@gmail.com, eric.snowberg@oracle.com, jgg@ziepe.ca Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Mon, Jun 8, 2026 at 12:52=E2=80=AFPM Mimi Zohar wr= ote: > On Fri, 2026-06-05 at 15:43 +0100, Yeoreum Yun wrote: > > There are situations where LSMs have dependencies that might mean they > > want to be initialised later in the boot process, to ensure those > > dependencies are available. In particular there are some TPM setups (Ar= m > > FF-A devices, SPI attached TPMs) required by IMA which are not > > guaranteed to be initialised for regular initcall_late. > > > > Add an initcall_late_sync option that can be used in these situations. > > > > Signed-off-by: Yeoreum Yun > > Cc: Paul Moore > > Jarkko has already queued 4/4. Paul, can we get an Ack from you? It's in my queue, but with the merge window opening next week, this is definitely not suitable for the upcoming merge window, so it's not near the top of my review list. --=20 paul-moore.com