ipe: move initcalls to the LSM framework

Reviewed-by: Kees Cook <kees@kernel.org>
Tested-by: Fan Wu <wufan@kernel.org>
Acked-by: Fan Wu <wufan@kernel.org>
Reviewed-by: John Johansen <john.johhansen@canonical.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
This commit is contained in:
Paul Moore 2025-02-18 17:13:08 -05:00
parent b0374e79a8
commit d934f97db8
3 changed files with 4 additions and 3 deletions

View file

@ -193,7 +193,7 @@ static const struct file_operations enforce_fops = {
* Return: %0 on success. If an error occurs, the function will return
* the -errno.
*/
static int __init ipe_init_securityfs(void)
int __init ipe_init_securityfs(void)
{
int rc = 0;
struct ipe_policy *ap;
@ -244,5 +244,3 @@ err:
securityfs_remove(root);
return rc;
}
fs_initcall(ipe_init_securityfs);

View file

@ -95,4 +95,5 @@ DEFINE_LSM(ipe) = {
.id = &ipe_lsmid,
.init = ipe_init,
.blobs = &ipe_blobs,
.initcall_fs = ipe_init_securityfs,
};

View file

@ -23,4 +23,6 @@ struct ipe_bdev *ipe_bdev(struct block_device *b);
struct ipe_inode *ipe_inode(const struct inode *inode);
#endif /* CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG */
int ipe_init_securityfs(void);
#endif /* _IPE_H */