LSM: loadable or static?

So do I.
One example is: dazuko for on-access virus scanning.
http://lwn.net/Articles/206075/

If Linux wants to care about security, he should move on and incorporate PaX, Grsecurity or
RSBAC.

Using Grsec you can load whatever modules you want at start time, and keep the system in that
states blocking further module changes. This is a better working approach, which takes care
more than just the LSM subsystem.

Regards,
Dw.