Re: [PATCH bpf-next v3 01/11] bpf, lsm: Annotate lsm hook return value range

[Paul Moore <paul@xxxxxxxxxxxxxx>]

On Mon, Jun 10, 2024 at 10:25 PM Xu Kuohai <xukuohai@xxxxxxxxxxxxxxx> wrote:
>
> Alright, I'll give it a try. Perhaps in the end, there will be a few
> hooks that cannot be converted. If that's the case, it seems we can
> just provide exceptions for the return value explanations for these
> not unconverted hooks, maybe on the BPF side only, thus avoiding the
> need to annotate return values for all LSM hooks.

Thanks.  Yes, while I don't think we will be able to normalize all of
the hooks to 0/-ERRNO, my guess is that we can reduce the exceptions
to a manageable count.

-- 
paul-moore.com