[PATCH bpf-next v3 01/11] bpf, lsm: Annotate lsm hook return value range

Paul Moore paul at paul-moore.com
Tue Jun 11 20:06:14 UTC 2024


On Mon, Jun 10, 2024 at 10:25 PM Xu Kuohai <xukuohai at huaweicloud.com> wrote:
>
> Alright, I'll give it a try. Perhaps in the end, there will be a few
> hooks that cannot be converted. If that's the case, it seems we can
> just provide exceptions for the return value explanations for these
> not unconverted hooks, maybe on the BPF side only, thus avoiding the
> need to annotate return values for all LSM hooks.

Thanks.  Yes, while I don't think we will be able to normalize all of
the hooks to 0/-ERRNO, my guess is that we can reduce the exceptions
to a manageable count.

-- 
paul-moore.com



More information about the Linux-security-module-archive mailing list