Re: [RFC PATCH v3 11/11] mseal:add documentation

From: Linus Torvalds
Date: Sat Jan 20 2024 - 11:40:41 EST


On Sat, 20 Jan 2024 at 07:23, Theo de Raadt <deraadt@xxxxxxxxxxx> wrote:
>
> There is an one large difference remainig between mimmutable() and mseal(),
> which is how other system calls behave.
>
> We return EPERM for failures in all the system calls that fail upon
> immutable memory (since Oct 2022).
>
> You are returning EACESS.
>
> Before it is too late, do you want to reconsider that return value, or
> do you have a justification for the choice?

I don't think there's any real reason for the difference.

Jeff - mind changing the EACESS to EPERM, and we'll have something
that is more-or-less compatible between Linux and OpenBSD?

Linus