[PATCH v3 2/2] docs: add fail_lsm_hooks info to fault-injection.rst
Aleksandr Nogikh
aleksandrnogikh at gmail.com
Thu Oct 29 18:35:26 UTC 2020
From: Aleksandr Nogikh <nogikh at google.com>
Describe fail_lsm_hooks fault injection capability.
Signed-off-by: Aleksandr Nogikh <nogikh at google.com>
---
v2:
- Added this commit.
---
Documentation/fault-injection/fault-injection.rst | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/Documentation/fault-injection/fault-injection.rst b/Documentation/fault-injection/fault-injection.rst
index 31ecfe44e5b4..48705adfbc18 100644
--- a/Documentation/fault-injection/fault-injection.rst
+++ b/Documentation/fault-injection/fault-injection.rst
@@ -48,6 +48,12 @@ Available fault injection capabilities
status code is NVME_SC_INVALID_OPCODE with no retry. The status code and
retry flag can be set via the debugfs.
+- fail_lsm_hooks
+
+ injects failures into LSM hooks. When a fault is injected, actual hooks
+ are not executed and a code from /sys/kernel/debug/fail_lsm_hooks/retval
+ is returned (the default value is -EACCES).
+
Configure fault-injection capabilities behavior
-----------------------------------------------
--
2.29.1.341.ge80a0c044ae-goog
More information about the Linux-security-module-archive
mailing list