On Fri, May 26, 2017 at 01:17:09PM -0700, Kees Cook wrote: > The LSM initialization routines walk security_hook_heads as an array > of struct list_head instead of via names to avoid a ton of needless > source. Whitelist this to avoid the false positive warning from the > plugin:
I think this crap just needs to be fixed properly. If not it almost defeats the protections as the "security" ops are just about everywhere.