diff --git a/kernel-patches/for-mainline/notes.txt b/kernel-patches/for-mainline/notes.txt
index ecc5636f9..e317b8eeb 100644
--- a/kernel-patches/for-mainline/notes.txt
+++ b/kernel-patches/for-mainline/notes.txt
@@ -8,5 +8,7 @@ inode_setattr hook
 
 * AppArmor should check for ATTR_FORCE in its inode_setattr hook,
   and should not log or deny ATTR_FORCE setattrs. SELinux does
-  that already as well.
+  that already as well. (For private inodes, the security_*
+  functions already skip the lsm hooks though, so this may be
+  unnecessary.)