tjh.dev
Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
1/*
2 * Copyright (C) 2005-2010 IBM Corporation
3 *
4 * Authors:
5 * Mimi Zohar <zohar@us.ibm.com>
6 * Kylene Hall <kjhall@us.ibm.com>
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation, version 2 of the License.
11 *
12 * File: evm.h
13 *
14 */
15
16#ifndef __INTEGRITY_EVM_H
17#define __INTEGRITY_EVM_H
18
19#include <linux/xattr.h>
20#include <linux/security.h>
21
22#include "../integrity.h"
23
24#define EVM_INIT_HMAC 0x0001
25#define EVM_INIT_X509 0x0002
26#define EVM_SETUP 0x80000000 /* userland has signaled key load */
27
28#define EVM_INIT_MASK (EVM_INIT_HMAC | EVM_INIT_X509 | EVM_SETUP)
29
30extern int evm_initialized;
31extern char *evm_hmac;
32extern char *evm_hash;
33
34#define EVM_ATTR_FSUUID 0x0001
35
36extern int evm_hmac_attrs;
37
38extern struct crypto_shash *hmac_tfm;
39extern struct crypto_shash *hash_tfm;
40
41/* List of EVM protected security xattrs */
42extern char *evm_config_xattrnames[];
43
44int evm_init_key(void);
45int evm_update_evmxattr(struct dentry *dentry,
46 const char *req_xattr_name,
47 const char *req_xattr_value,
48 size_t req_xattr_value_len);
49int evm_calc_hmac(struct dentry *dentry, const char *req_xattr_name,
50 const char *req_xattr_value,
51 size_t req_xattr_value_len, char *digest);
52int evm_calc_hash(struct dentry *dentry, const char *req_xattr_name,
53 const char *req_xattr_value,
54 size_t req_xattr_value_len, char *digest);
55int evm_init_hmac(struct inode *inode, const struct xattr *xattr,
56 char *hmac_val);
57int evm_init_secfs(void);
58
59#endif