How the LSM works

The patch places many security hooks
Almost every operation is covered
132 hooks in November 5 patch

There are hooks for:
Process operations
Networking
File operations
Inter-process communication
Module loading
...

The LSM patch touches most of the core kernel code