Re: [PATCH v7 5/10] lsm: security: Add additional enum values for bpf integrity checks

From: Paul Moore

Date: Wed May 13 2026 - 14:53:32 EST


On May 7, 2026 Blaise Boscaccy <bboscaccy@xxxxxxxxxxxxxxxxxxx> wrote:
>
> First add a generic LSM_INT_VERDICT_FAULT value to indicate a system
> failure during checking. Second, add a LSM_INT_VERDICT_UNKNOWNKEY to
> signal that the payload was signed with a key other than one that
> exists in the secondary keyring. And finally add an
> LSM_INT_VERDICT_UNEXPECTED enum value to indicate that a unexpected
> hash value was encountered at some stage of verification.
>
> Signed-off-by: Blaise Boscaccy <bboscaccy@xxxxxxxxxxxxxxxxxxx>
> ---
> include/linux/security.h | 3 +++
> 1 file changed, 3 insertions(+)

Merged into lsm/dev, thanks.

--
paul-moore.com