TIL Tesla wrote an LSM called "XPin", similar to LoadPin (which ties modules and firmware to a specific filesystem), but for PROT_EXEC mappings being tied to a specific filesystem:
https://github.com/teslamotors/linux/tree/a3b2ab966b1c8dc105c49d3fb41950c023c0c844/security/xpin
GitHublinux/security/xpin at a3b2ab966b1c8dc105c49d3fb41950c023c0c844 · teslamotors/linuxLinux sources. Contribute to teslamotors/linux development by creating an account on GitHub.