1 files changed, 6 insertions, 0 deletions

diff --git a/include/linux/lsm_hooks.h b/include/linux/lsm_hooks.h
index 2849e9b2c01d..27d4db9588bb 100644
--- a/include/linux/lsm_hooks.h
+++ b/include/linux/lsm_hooks.h
@@ -2045,8 +2045,14 @@ extern void security_add_hooks(struct security_hook_list *hooks, int count,
 #define LSM_FLAG_LEGACY_MAJOR   BIT(0)
 #define LSM_FLAG_EXCLUSIVE      BIT(1)
 
+enum lsm_order {
+        LSM_ORDER_FIRST = -1,   /* This is only for capabilities. */
+        LSM_ORDER_MUTABLE = 0,
+};
+
 struct lsm_info {
         const char *name;       /* Required. */
+        enum lsm_order order;   /* Optional: default is LSM_ORDER_MUTABLE */
         unsigned long flags;    /* Optional: flags describing LSM */
         int *enabled;           /* Optional: controlled by CONFIG_LSM */
         int (*init)(void);      /* Required. */