diff --git a/fs/tracefs/inode.c b/fs/tracefs/inode.c
index de5b72216b1a706bc825a1cea3471079f73631ca..3b8dd938b1c8f304894fd25a9b430a56a960b33b 100644
--- a/fs/tracefs/inode.c
+++ b/fs/tracefs/inode.c
@@ -673,6 +673,9 @@ static struct dentry *__create_dir(const char *name, struct dentry *parent,
  */
 struct dentry *tracefs_create_dir(const char *name, struct dentry *parent)
 {
+	if (security_locked_down(LOCKDOWN_TRACEFS))
+		return NULL;
+
 	return __create_dir(name, parent, &simple_dir_inode_operations);
 }