]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
Merge branch 'bpf-fix-setting-retval-to-eperm-for-cgroup-hooks-not-returning-errno'
authorAlexei Starovoitov <ast@kernel.org>
Sat, 13 Jun 2026 03:33:16 +0000 (20:33 -0700)
committerAlexei Starovoitov <ast@kernel.org>
Sat, 13 Jun 2026 03:33:16 +0000 (20:33 -0700)
commit2ae53824b4462a13c2c773c57b2d2180a11d7fea
treee7bca3199eab2954238753d23aa47ab02efd07f5
parent746145bd7aaa3db2d77ef26aa8f3ebe1ca83cef6
parentcec8423776176eb73429443ecb859789af9602e5
Merge branch 'bpf-fix-setting-retval-to-eperm-for-cgroup-hooks-not-returning-errno'

Xu Kuohai says:

====================
bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno

This series fixes the issue reported by sashiko in [1]. The issue is that,
when a cgroup BPF program exits with 0, bpf_prog_run_array_cg() sets
the hook return value to -EPERM if it is not a valid errno. This is
correct for errno-based hooks, which return 0 on success and negative
errno on failure, but wrong for void and boolean LSM hooks. Boolean
LSM hooks should only return true or false, and void LSM hooks have
no return value at all.

Fix it by skipping setting -EPERM for hooks not returning errno.

[1] https://lore.kernel.org/bpf/20260605144232.95A141F00893@smtp.kernel.org/
====================

Link: https://patch.msgid.link/20260610201724.733943-1-xukuohai@huaweicloud.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>