If possible, you're better off using one of the existing Linux security modules than trying to write your own.

The two primary security modules in Linux each take a different view on how to handle this balance.