sadly I don't have a setup to test, so I am unsure which exact patch does it
sadly I don't have a setup to test, so I am unsure which exact patch does it

lsm=lockdown,yama,integrity,selinux,bpf,landlocklockdown=nonemight also work?
lsm=bpf didnt do it❯ cat /sys/kernel/security/lockdown
none [integrity] confidentialitylsm=lockdown,yama,integrity,selinux,bpf,landlocklockdown=nonecat /proc/cmdline
rw rootflags=subvol=@ quiet rd.luks.name=1921d993-c285-4094-997d-asf=cryptroot root=/dev/mapper/cryptroot udev.log_priority=3 resume=UUID=1fa26b08-9365-4699-asdfsadfe resume_offset=58673610 rd.luks.options=1921d993-c285-4094-997d-7e526e4300f8=discard,timeout=0,tries=0,tpm2-device=auto video=eDP-1:panel_orientation=left_side_up lsm=❯ systemctl hibernate
Call to Hibernate failed: Sleep verb 'hibernate' is not configured or configuration is not supported by kernel
❯ dmesg | tail
[ 93.480819] Lockdown: systemd-logind: hibernation is restricted; see man kernel_lockdown.7 lsm=bpf