Thread (20 messages) 20 messages, 3 authors, 2025-05-12

Re: [PATCH 1/3] powerpc/pseries: Correct secvar format representation for static key management

From: Andrew Donnellan <hidden>
Date: 2025-05-12 09:55:46
Also in: linux-integrity, lkml

On Wed, 2025-05-07 at 00:29 +0530, Srish Srinivasan wrote:
quoted
I think you should handle this as the existing code does: if it's
ENOENT, return 0, and for other codes print an error and return -
EIO.
Currently, the other layers in the boot stack assume static key mode
for 
any failure in reading SB_VERSION. We added the same interpretation
in the kernel to keep it consistent with the other layers, and
represent 
the same to the user. This is the reason for not parsing the error
codes
when trying to read SB_VERSION, and defaulting to the static key 
management mode. However, we want the exact error code to be logged
for debugging purposes. And, it does make sense to have logging only
for 
error codes other than -ENOENT and -EPERM, as you suggested.
Does this sound okay?
Okay, maybe document explicitly in a comment that we default to static
mode in the event of any weird errors.

-- 
Andrew Donnellan    OzLabs, ADL Canberra
ajd@linux.ibm.com   IBM Australia Limited
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help