I noticed you don't have the following lines (or some of the other related security ones) in your .config. CONFIG_SECURITY=y CONFIG_SECURITY_WRITABLE_HOOKS=y Seems like we need a 'depends on SECURITY' line (or something like that) in security/safesetid/Kconfig -- let me see if that fixes things and if so I'll upload a patch On Tue, Jan 29, 2019 at 9:04 AM Randy Dunlap <rdunlap@xxxxxxxxxxxxx> wrote: > > On 1/28/19 10:11 PM, Stephen Rothwell wrote: > > Hi all, > > > > Changes since 20190125: > > > > on x86_64: > > ld: security/safesetid/lsm.o:(.data+0x10): undefined reference to `security_hook_heads' > ld: security/safesetid/lsm.o:(.data+0x38): undefined reference to `security_hook_heads' > ld: security/safesetid/lsm.o: in function `safesetid_security_init': > lsm.c:(.init.text+0x14): undefined reference to `security_add_hooks' > > > Full randconfig file is attached. > > -- > ~Randy