1 files changed, 21 insertions, 0 deletions

diff --git a/security/security.c b/security/security.c
index f1b8d2587639..6bc591f77b1a 100644
--- a/security/security.c
+++ b/security/security.c
@@ -52,12 +52,30 @@ static __initdata bool debug;
                         pr_info(__VA_ARGS__);                   \
         } while (0)
 
+static void __init ordered_lsm_init(void)
+{
+        struct lsm_info *lsm;
+        int ret;
+
+        for (lsm = __start_lsm_info; lsm < __end_lsm_info; lsm++) {
+                if ((lsm->flags & LSM_FLAG_LEGACY_MAJOR) != 0)
+                        continue;
+
+                init_debug("initializing %s\n", lsm->name);
+                ret = lsm->init();
+                WARN(ret, "%s failed to initialize: %d\n", lsm->name, ret);
+        }
+}
+
 static void __init major_lsm_init(void)
 {
         struct lsm_info *lsm;
         int ret;
 
         for (lsm = __start_lsm_info; lsm < __end_lsm_info; lsm++) {
+                if ((lsm->flags & LSM_FLAG_LEGACY_MAJOR) == 0)
+                        continue;
+
                 init_debug("initializing %s\n", lsm->name);
                 ret = lsm->init();
                 WARN(ret, "%s failed to initialize: %d\n", lsm->name, ret);
@@ -87,6 +105,9 @@ int __init security_init(void)
         yama_add_hooks();
         loadpin_add_hooks();
 
+        /* Load LSMs in specified order. */
+        ordered_lsm_init();
+
         /*
          * Load all the remaining security modules.
          */