LOCKDOWN_DEBUGFS
if (df->unlocked_ioctl && !security_locked_down(LOCKDOWN_DEBUGFS))
if (security_locked_down(LOCKDOWN_DEBUGFS))
ret = security_locked_down(LOCKDOWN_DEBUGFS);
[LOCKDOWN_DEBUGFS] = "debugfs access",