[BPF_TRACE_FEXIT]               = "trace_fexit",
        [BPF_MODIFY_RETURN]             = "modify_return",
        [BPF_LSM_MAC]                   = "lsm_mac",
+       [BPF_LSM_CGROUP]                = "lsm_cgroup",
        [BPF_SK_LOOKUP]                 = "sk_lookup",
        [BPF_TRACE_ITER]                = "trace_iter",
        [BPF_XDP_DEVMAP]                = "xdp_devmap",
        SEC_DEF("freplace+",            EXT, 0, SEC_ATTACH_BTF, attach_trace),
        SEC_DEF("lsm+",                 LSM, BPF_LSM_MAC, SEC_ATTACH_BTF, attach_lsm),
        SEC_DEF("lsm.s+",               LSM, BPF_LSM_MAC, SEC_ATTACH_BTF | SEC_SLEEPABLE, attach_lsm),
+       SEC_DEF("lsm_cgroup+",          LSM, BPF_LSM_CGROUP, SEC_ATTACH_BTF),
        SEC_DEF("iter+",                TRACING, BPF_TRACE_ITER, SEC_ATTACH_BTF, attach_iter),
        SEC_DEF("iter.s+",              TRACING, BPF_TRACE_ITER, SEC_ATTACH_BTF | SEC_SLEEPABLE, attach_iter),
        SEC_DEF("syscall",              SYSCALL, 0, SEC_SLEEPABLE),
                *kind = BTF_KIND_TYPEDEF;
                break;
        case BPF_LSM_MAC:
+       case BPF_LSM_CGROUP:
                *prefix = BTF_LSM_PREFIX;
                *kind = BTF_KIND_FUNC;
                break;