[GIT PULL] security subsystem updates for 4.7

Please pull these updates for the 4.7 kernel. Highlights: 1. A new LSM, "LoadPin", from Kees Cook is added, which allows forcing of modules and firmware to be loaded from a specific device (this is from ChromeOS, where the device as a whole is verified cryptographically via

[GIT PULL] security subsystem updates for 4.7

Please pull these updates for the 4.7 kernel. Highlights: 1. A new LSM, "LoadPin", from Kees Cook is added, which allows forcing of modules and firmware to be loaded from a specific device (this is from ChromeOS, where the device as a whole is verified cryptographically via