tjh.dev
Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
1/*
2 * Copyright (C) 2005-2010 IBM Corporation
3 *
4 * Authors:
5 * Mimi Zohar <zohar@us.ibm.com>
6 * Kylene Hall <kjhall@us.ibm.com>
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation, version 2 of the License.
11 *
12 * File: evm.h
13 *
14 */
15
16#ifndef __INTEGRITY_EVM_H
17#define __INTEGRITY_EVM_H
18
19#include <linux/xattr.h>
20#include <linux/security.h>
21
22#include "../integrity.h"
23
24#define EVM_INIT_HMAC 0x0001
25#define EVM_INIT_X509 0x0002
26#define EVM_ALLOW_METADATA_WRITES 0x0004
27#define EVM_SETUP_COMPLETE 0x80000000 /* userland has signaled key load */
28
29#define EVM_KEY_MASK (EVM_INIT_HMAC | EVM_INIT_X509)
30#define EVM_INIT_MASK (EVM_INIT_HMAC | EVM_INIT_X509 | EVM_SETUP_COMPLETE | \
31 EVM_ALLOW_METADATA_WRITES)
32
33extern int evm_initialized;
34extern char *evm_hmac;
35extern char *evm_hash;
36
37#define EVM_ATTR_FSUUID 0x0001
38
39extern int evm_hmac_attrs;
40
41extern struct crypto_shash *hmac_tfm;
42extern struct crypto_shash *hash_tfm;
43
44/* List of EVM protected security xattrs */
45extern char *evm_config_xattrnames[];
46
47int evm_init_key(void);
48int evm_update_evmxattr(struct dentry *dentry,
49 const char *req_xattr_name,
50 const char *req_xattr_value,
51 size_t req_xattr_value_len);
52int evm_calc_hmac(struct dentry *dentry, const char *req_xattr_name,
53 const char *req_xattr_value,
54 size_t req_xattr_value_len, char *digest);
55int evm_calc_hash(struct dentry *dentry, const char *req_xattr_name,
56 const char *req_xattr_value,
57 size_t req_xattr_value_len, char type, char *digest);
58int evm_init_hmac(struct inode *inode, const struct xattr *xattr,
59 char *hmac_val);
60int evm_init_secfs(void);
61
62#endif