diff --git a/kernel/trace/trace_dynevent.c b/kernel/trace/trace_dynevent.c
index 33d7057d83b014d23d9eacce6b7e4d8fc7e54bad..a10e2f2de70f8255f1f387b9becffe414728d734 100644
--- a/kernel/trace/trace_dynevent.c
+++ b/kernel/trace/trace_dynevent.c
@@ -190,6 +190,10 @@ static int dyn_event_open(struct inode *inode, struct file *file)
 {
 	int ret;
 
+	ret = security_locked_down(LOCKDOWN_TRACEFS);
+	if (ret)
+		return ret;
+
 	ret = tracing_check_open_get_tr(NULL);
 	if (ret)
 		return ret;