Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx> writes: > bpf_lsm is that thing that needs to load and start acting early. > It's somewhat chicken and egg. fork_usermode_blob() will start a process > that will load and apply security policy to all further forks and > execs. What is the timeframe for bpf_lsm patches wanting to use fork_usermode_blob()? Are we possibly looking at something that will be ready for the next merge window? Eric