Re: [apparmor] [PATCH bpf-next v8 1/4] bpf: Add update_socket_protocol hook

2023-08-03 Thread Simon Horman
On Thu, Aug 03, 2023 at 03:30:39PM +0800, Geliang Tang wrote: > Add a hook named update_socket_protocol in __sys_socket(), for bpf > progs to attach to and update socket protocol. One user case is to > force legacy TCP apps to create and use MPTCP sockets instead of > TCP ones. > > Define a mod_re

Re: [apparmor] [PATCH bpf-next v4 03/20] lsm: Refactor return value of LSM hook inode_getsecurity

2024-07-12 Thread Simon Horman
On Thu, Jul 11, 2024 at 07:18:51PM +0800, Xu Kuohai wrote: > From: Xu Kuohai > > To be consistent with most LSM hooks, convert the return value of > hook inode_getsecurity to 0 or a negative error code. > > Before: > - Hook inode_getsecurity returns size of buffer on success or a > negative er