d7bf404c33
It provides all possible hooks, which makes it harder to properly use major LSMs. Using security= to enable a major LSM puts it at the end of the list. Some functions (like security_getprocattr) only use the first matching hook, thus prefer bpf.