Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
tjh.dev
kernel
os
linux
1/* SPDX-License-Identifier: GPL-2.0 */
2/*
3 * evm.h
4 *
5 * Copyright (c) 2009 IBM Corporation
6 * Author: Mimi Zohar <zohar@us.ibm.com>
7 */
8
9#ifndef _LINUX_EVM_H
10#define _LINUX_EVM_H
11
12#include <linux/integrity.h>
13#include <linux/xattr.h>
14
15struct integrity_iint_cache;
16
17#ifdef CONFIG_EVM
18extern int evm_set_key(void *key, size_t keylen);
19extern enum integrity_status evm_verifyxattr(struct dentry *dentry,
20 const char *xattr_name,
21 void *xattr_value,
22 size_t xattr_value_len,
23 struct integrity_iint_cache *iint);
24extern int evm_inode_setattr(struct mnt_idmap *idmap,
25 struct dentry *dentry, struct iattr *attr);
26extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid);
27extern int evm_inode_setxattr(struct mnt_idmap *idmap,
28 struct dentry *dentry, const char *name,
29 const void *value, size_t size);
30extern void evm_inode_post_setxattr(struct dentry *dentry,
31 const char *xattr_name,
32 const void *xattr_value,
33 size_t xattr_value_len);
34extern int evm_inode_copy_up_xattr(const char *name);
35extern int evm_inode_removexattr(struct mnt_idmap *idmap,
36 struct dentry *dentry, const char *xattr_name);
37extern void evm_inode_post_removexattr(struct dentry *dentry,
38 const char *xattr_name);
39static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap,
40 struct dentry *dentry,
41 const char *acl_name)
42{
43 evm_inode_post_removexattr(dentry, acl_name);
44}
45extern int evm_inode_set_acl(struct mnt_idmap *idmap,
46 struct dentry *dentry, const char *acl_name,
47 struct posix_acl *kacl);
48static inline int evm_inode_remove_acl(struct mnt_idmap *idmap,
49 struct dentry *dentry,
50 const char *acl_name)
51{
52 return evm_inode_set_acl(idmap, dentry, acl_name, NULL);
53}
54static inline void evm_inode_post_set_acl(struct dentry *dentry,
55 const char *acl_name,
56 struct posix_acl *kacl)
57{
58 return evm_inode_post_setxattr(dentry, acl_name, NULL, 0);
59}
60
61int evm_inode_init_security(struct inode *inode, struct inode *dir,
62 const struct qstr *qstr, struct xattr *xattrs,
63 int *xattr_count);
64extern bool evm_revalidate_status(const char *xattr_name);
65extern int evm_protected_xattr_if_enabled(const char *req_xattr_name);
66extern int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
67 int buffer_size, char type,
68 bool canonical_fmt);
69#ifdef CONFIG_FS_POSIX_ACL
70extern int posix_xattr_acl(const char *xattrname);
71#else
72static inline int posix_xattr_acl(const char *xattrname)
73{
74 return 0;
75}
76#endif
77#else
78
79static inline int evm_set_key(void *key, size_t keylen)
80{
81 return -EOPNOTSUPP;
82}
83
84#ifdef CONFIG_INTEGRITY
85static inline enum integrity_status evm_verifyxattr(struct dentry *dentry,
86 const char *xattr_name,
87 void *xattr_value,
88 size_t xattr_value_len,
89 struct integrity_iint_cache *iint)
90{
91 return INTEGRITY_UNKNOWN;
92}
93#endif
94
95static inline int evm_inode_setattr(struct mnt_idmap *idmap,
96 struct dentry *dentry, struct iattr *attr)
97{
98 return 0;
99}
100
101static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)
102{
103 return;
104}
105
106static inline int evm_inode_setxattr(struct mnt_idmap *idmap,
107 struct dentry *dentry, const char *name,
108 const void *value, size_t size)
109{
110 return 0;
111}
112
113static inline void evm_inode_post_setxattr(struct dentry *dentry,
114 const char *xattr_name,
115 const void *xattr_value,
116 size_t xattr_value_len)
117{
118 return;
119}
120
121static inline int evm_inode_copy_up_xattr(const char *name)
122{
123 return 0;
124}
125
126static inline int evm_inode_removexattr(struct mnt_idmap *idmap,
127 struct dentry *dentry,
128 const char *xattr_name)
129{
130 return 0;
131}
132
133static inline void evm_inode_post_removexattr(struct dentry *dentry,
134 const char *xattr_name)
135{
136 return;
137}
138
139static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap,
140 struct dentry *dentry,
141 const char *acl_name)
142{
143 return;
144}
145
146static inline int evm_inode_set_acl(struct mnt_idmap *idmap,
147 struct dentry *dentry, const char *acl_name,
148 struct posix_acl *kacl)
149{
150 return 0;
151}
152
153static inline int evm_inode_remove_acl(struct mnt_idmap *idmap,
154 struct dentry *dentry,
155 const char *acl_name)
156{
157 return 0;
158}
159
160static inline void evm_inode_post_set_acl(struct dentry *dentry,
161 const char *acl_name,
162 struct posix_acl *kacl)
163{
164 return;
165}
166
167static inline int evm_inode_init_security(struct inode *inode, struct inode *dir,
168 const struct qstr *qstr,
169 struct xattr *xattrs,
170 int *xattr_count)
171{
172 return 0;
173}
174
175static inline bool evm_revalidate_status(const char *xattr_name)
176{
177 return false;
178}
179
180static inline int evm_protected_xattr_if_enabled(const char *req_xattr_name)
181{
182 return false;
183}
184
185static inline int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
186 int buffer_size, char type,
187 bool canonical_fmt)
188{
189 return -EOPNOTSUPP;
190}
191
192#endif /* CONFIG_EVM */
193#endif /* LINUX_EVM_H */