319 		 * PKCS#7 signature) must be rejected at load: the signature  in signature_enforced()
328 		ASSERT_EQ(fd, -EBADMSG, "invalid signature rejected at load");  in signature_enforced()
345 		 * non-exclusive map is rejected, before the signature is even  in signed_nonexcl_fd_array_rejected()
356 					  "non-exclusive map in signed fd_array rejected");  in signed_nonexcl_fd_array_rejected()
379 		 * rejected by the frozen check with -EPERM. The exclusivity  in signed_unfrozen_fd_array_rejected()
394 					  "unfrozen map in signed fd_array rejected");  in signed_unfrozen_fd_array_rejected()
414 		 * signature. An exclusive map of any other type is rejected  in signed_nonarray_fd_array_rejected()
431 				  "non-array map in signed fd_array rejected");  in signed_nonarray_fd_array_rejected()
512 		  "BTF in signed fd_array rejected");  in signed_btf_fd_array_rejected()
539 		 * invalid signature is rejected and the log says why.  in signature_failure_logs()
557 		ASSERT_LT(fd, 0, "invalid signature rejected at load");  in signature_failure_logs()
575 		 * is rejected before the buffer is read.  in signature_too_large()
579 		ASSERT_EQ(fd, -EINVAL, "oversized signature rejected");  in signature_too_large()
594 		 * A present signature with signature_size == 0 is rejected  in signature_zero_size()
600 		ASSERT_EQ(fd, -EINVAL, "zero-size signature rejected");  in signature_zero_size()
616 		 * rejected up front: bpf_prog_verify_signature() fails the keyring  in signature_bad_keyring()
622 		ASSERT_EQ(fd, -EINVAL, "signature with bad keyring_id rejected");  in signature_bad_keyring()
810  * rejected. Uses ./verify_sig_setup.sh + ./sign-file at runtime, like
902 	ASSERT_FALSE(ran, "tampered loader rejected before run");  in signature_authenticates_insns()
998 	ASSERT_FALSE(ran, "tampered metadata rejected before run");  in signature_authenticates_metadata()
1037 		  "hash of unfrozen map rejected");  in hash_requires_frozen()
1053 		  "update after freeze rejected");  in no_update_after_freeze()
1068 			  "freeze rejected while writable mmap held");  in freeze_writable_mmap()
1084 	ASSERT_EQ(w, MAP_FAILED, "writable mmap of frozen map rejected");  in no_writable_mmap_frozen()
1181 		  "wrong hash_size rejected");  in map_hash_bad_size()
1287 	ASSERT_EQ(prog_fd, -EACCES, "unfolded metadata rejected");  in lsm_signature_verdict()
1532  * still authenticates the instructions (a tampered copy is rejected).
1582 	/* The signature covers the instructions, so tampering must be rejected. */  in signed_no_fd_array()
1587 	ASSERT_EQ(err, -EKEYREJECTED, "tampered map-less program rejected");  in signed_no_fd_array()
1597  * unfolded fd baked into the signed instructions - is rejected by the verifier.
1647 	ASSERT_EQ(err, -EINVAL, "signed program referencing a map by fd rejected");  in signed_map_by_fd_rejected()
1710 	ASSERT_EQ(err, -EACCES, "signed program binding a sparse fd_array map rejected");  in signed_sparse_fd_array_rejected()
1773 	ASSERT_EQ(err, -EACCES, "module kfunc BTF in signed program rejected");  in signed_module_kfunc_rejected()