[mirror_ubuntu-zesty-kernel.git] / crypto / fips.c

/*
 * FIPS 200 support.
 *
 * Copyright (c) 2008 Neil Horman <nhorman@tuxdriver.com>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; either version 2 of the License, or (at your option)
 * any later version.
 *
 */

#include <linux/export.h>
#include <linux/fips.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/kernel.h>
#include <linux/sysctl.h>

int fips_enabled;
EXPORT_SYMBOL_GPL(fips_enabled);

/* Process kernel command-line parameter at boot time. fips=0 or fips=1 */
static int fips_enable(char *str)
{
	fips_enabled = !!simple_strtol(str, NULL, 0);
	printk(KERN_INFO "fips mode: %s\n",
		fips_enabled ? "enabled" : "disabled");
	return 1;
}

__setup("fips=", fips_enable);

static struct ctl_table crypto_sysctl_table[] = {
	{
		.procname       = "fips_enabled",
		.data           = &fips_enabled,
		.maxlen         = sizeof(int),
		.mode           = 0444,
		.proc_handler   = proc_dointvec
	},
	{}
};

static struct ctl_table crypto_dir_table[] = {
	{
		.procname       = "crypto",
		.mode           = 0555,
		.child          = crypto_sysctl_table
	},
	{}
};

static struct ctl_table_header *crypto_sysctls;

static void crypto_proc_fips_init(void)
{
	crypto_sysctls = register_sysctl_table(crypto_dir_table);
}

static void crypto_proc_fips_exit(void)
{
	unregister_sysctl_table(crypto_sysctls);
}

static int __init fips_init(void)
{
	crypto_proc_fips_init();
	return 0;
}

static void __exit fips_exit(void)
{
	crypto_proc_fips_exit();
}

module_init(fips_init);
module_exit(fips_exit);
Commit	Line	Data
ccb778e1 NH	1	/*
	2	* FIPS 200 support.
	3	*
	4	* Copyright (c) 2008 Neil Horman <nhorman@tuxdriver.com>
	5	*
	6	* This program is free software; you can redistribute it and/or modify it
	7	* under the terms of the GNU General Public License as published by the Free
	8	* Software Foundation; either version 2 of the License, or (at your option)
	9	* any later version.
	10	*
	11	*/
	12
76450f93 HX	13	#include <linux/export.h>
	14	#include <linux/fips.h>
	15	#include <linux/init.h>
94072cb2	16	#include <linux/module.h>
76450f93	17	#include <linux/kernel.h>
94072cb2	18	#include <linux/sysctl.h>
ccb778e1 NH	19
	20	int fips_enabled;
	21	EXPORT_SYMBOL_GPL(fips_enabled);
	22
	23	/* Process kernel command-line parameter at boot time. fips=0 or fips=1 */
	24	static int fips_enable(char *str)
	25	{
	26	fips_enabled = !!simple_strtol(str, NULL, 0);
	27	printk(KERN_INFO "fips mode: %s\n",
	28	fips_enabled ? "enabled" : "disabled");
	29	return 1;
	30	}
	31
	32	__setup("fips=", fips_enable);
94072cb2 HX	33
	34	static struct ctl_table crypto_sysctl_table[] = {
	35	{
	36	.procname = "fips_enabled",
	37	.data = &fips_enabled,
	38	.maxlen = sizeof(int),
	39	.mode = 0444,
	40	.proc_handler = proc_dointvec
	41	},
	42	{}
	43	};
	44
	45	static struct ctl_table crypto_dir_table[] = {
	46	{
	47	.procname = "crypto",
	48	.mode = 0555,
	49	.child = crypto_sysctl_table
	50	},
	51	{}
	52	};
	53
	54	static struct ctl_table_header *crypto_sysctls;
	55
	56	static void crypto_proc_fips_init(void)
	57	{
	58	crypto_sysctls = register_sysctl_table(crypto_dir_table);
	59	}
	60
	61	static void crypto_proc_fips_exit(void)
	62	{
	63	unregister_sysctl_table(crypto_sysctls);
	64	}
	65
	66	static int __init fips_init(void)
	67	{
	68	crypto_proc_fips_init();
	69	return 0;
	70	}
	71
	72	static void __exit fips_exit(void)
	73	{
	74	crypto_proc_fips_exit();
	75	}
	76
	77	module_init(fips_init);
	78	module_exit(fips_exit);