Re: [kpsingh:static_calls] [security] 9e15595ed0: Kernel_panic-not_syncing:lsm_static_call_init-Ran_out_of_static_slots

[Paul Moore]

On Mon, Apr 15, 2024 at 9:21 AM Tetsuo Handa
<penguin-kernel@xxxxxxxxxxxxxxxxxxx> wrote:
> On 2024/04/15 17:26, KP Singh wrote:
> > This seems like an odd config which does not enable STATIC_CALL, I am going to
> > make CONFIG_SECURITY depend on CONFIG_STATIC_CALL and make the dependency explicit.
>
> If CONFIG_SECURITY depends on CONFIG_STATIC_CALL, architectures which do not
> support CONFIG_STATIC_CALL can no longer use LSM ? That sounds a bad dependency.

Agreed.  If the arch doesn't support static calls we need a fallback
solution for the LSM that is no worse than what we have now, and
preferably would still solve the issue of the BPF hooks active even
where this is no BPF program attached.

-- 
paul-moore.com