On Mon, Jul 15, 2019 at 3:54 PM Daniel Borkmann <daniel@xxxxxxxxxxxxx> wrote: > Hmm, does security_locked_down() ever return a code > 0 or why do you > have the double check on return code? If not, then for clarity the > ret code from security_locked_down() should be checked as 'ret < 0' > as well and out label should be at the memset directly instead. It doesn't, so I'll update. Thanks!