We don't have a proof of concept for the LSM module. I agree with you that in practice
it would probably need to implement some kind of "list of files we care about",
but I do not have an intelligent opinion about that.
Based on Roberto's comment in a different sub-thread, there could be some ongoing work
integrating with IMA that might be past the hypothetical stage?