# Re: \[PATCH V35 23/29\] bpf: Restrict bpf when kernel lockdown is in confidentiality mode

- From: Matthew Garrett \<hidden\>
- Date: 2019-07-16 20:32:47 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2019/07/5657383
- Thread: https://ratatoskr.run/linux-security-module/2019/07/5656537/t.md

```text
On Mon, Jul 15, 2019 at 3:54 PM Daniel Borkmann [ref] wrote:
> Hmm, does security_locked_down() ever return a code > 0 or why do you
> have the double check on return code? If not, then for clarity the
> ret code from security_locked_down() should be checked as 'ret < 0'
> as well and out label should be at the memset directly instead.

It doesn't, so I'll update. Thanks!
```