On Wed, 5 Apr 2017, David Howells wrote: > +#include <linux/security.h> > +#include <linux/export.h> > + > +static __read_mostly bool kernel_locked_down;
How about marking this __ro_after_init if ALLOW_LOCKDOWN_LIFT is not configured? -- James Morris <jmor...@namei.org>