[PATCH v4 2/2] docs: add fail_lsm_hooks info to fault-injection.rst
Aleksandr Nogikh
a.nogikh at gmail.com
Wed Nov 11 10:44:09 UTC 2020
From: Aleksandr Nogikh <nogikh at google.com>
Describe fail_lsm_hooks fault injection capability.
Signed-off-by: Aleksandr Nogikh <nogikh at google.com>
--
v2:
- Added this commit.
---
Documentation/fault-injection/fault-injection.rst | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/Documentation/fault-injection/fault-injection.rst b/Documentation/fault-injection/fault-injection.rst
index 31ecfe44e5b4..48705adfbc18 100644
--- a/Documentation/fault-injection/fault-injection.rst
+++ b/Documentation/fault-injection/fault-injection.rst
@@ -48,6 +48,12 @@ Available fault injection capabilities
status code is NVME_SC_INVALID_OPCODE with no retry. The status code and
retry flag can be set via the debugfs.
+- fail_lsm_hooks
+
+ injects failures into LSM hooks. When a fault is injected, actual hooks
+ are not executed and a code from /sys/kernel/debug/fail_lsm_hooks/retval
+ is returned (the default value is -EACCES).
+
Configure fault-injection capabilities behavior
-----------------------------------------------
--
2.29.2.222.g5d2a92d10f8-goog
More information about the Linux-security-module-archive
mailing list