From: Alexei Starovoitov Date: Sat, 13 Jun 2026 03:33:16 +0000 (-0700) Subject: Merge branch 'bpf-fix-setting-retval-to-eperm-for-cgroup-hooks-not-returning-errno' X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2ae53824b4462a13c2c773c57b2d2180a11d7fea;p=thirdparty%2Flinux.git Merge branch 'bpf-fix-setting-retval-to-eperm-for-cgroup-hooks-not-returning-errno' Xu Kuohai says: ==================== bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno This series fixes the issue reported by sashiko in [1]. The issue is that, when a cgroup BPF program exits with 0, bpf_prog_run_array_cg() sets the hook return value to -EPERM if it is not a valid errno. This is correct for errno-based hooks, which return 0 on success and negative errno on failure, but wrong for void and boolean LSM hooks. Boolean LSM hooks should only return true or false, and void LSM hooks have no return value at all. Fix it by skipping setting -EPERM for hooks not returning errno. [1] https://lore.kernel.org/bpf/20260605144232.95A141F00893@smtp.kernel.org/ ==================== Link: https://patch.msgid.link/20260610201724.733943-1-xukuohai@huaweicloud.com Signed-off-by: Alexei Starovoitov --- 2ae53824b4462a13c2c773c57b2d2180a11d7fea