Example - module loading

LSM patch adds this to module.c:

     /* check that we have permission to do this */
     error = security_ops->module_ops->create_module(name, size);
     if (error)
          goto err1;

Notes:
The LSM hook is in addition to other checks
A separate init_module check exists
An LSM must provide all hooks
Can just return 0 for default behavior