]>
git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blob - security/integrity/evm/evm.h
2 * Copyright (C) 2005-2010 IBM Corporation
5 * Mimi Zohar <zohar@us.ibm.com>
6 * Kylene Hall <kjhall@us.ibm.com>
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation, version 2 of the License.
16 #ifndef __INTEGRITY_EVM_H
17 #define __INTEGRITY_EVM_H
19 #include <linux/xattr.h>
20 #include <linux/security.h>
22 #include "../integrity.h"
24 #define EVM_INIT_HMAC 0x0001
25 #define EVM_INIT_X509 0x0002
26 #define EVM_SETUP 0x80000000 /* userland has signaled key load */
28 #define EVM_INIT_MASK (EVM_INIT_HMAC | EVM_INIT_X509 | EVM_SETUP)
30 extern int evm_initialized
;
31 extern char *evm_hmac
;
32 extern char *evm_hash
;
34 #define EVM_ATTR_FSUUID 0x0001
36 extern int evm_hmac_attrs
;
38 extern struct crypto_shash
*hmac_tfm
;
39 extern struct crypto_shash
*hash_tfm
;
41 /* List of EVM protected security xattrs */
42 extern char *evm_config_xattrnames
[];
44 int evm_init_key(void);
45 int evm_update_evmxattr(struct dentry
*dentry
,
46 const char *req_xattr_name
,
47 const char *req_xattr_value
,
48 size_t req_xattr_value_len
);
49 int evm_calc_hmac(struct dentry
*dentry
, const char *req_xattr_name
,
50 const char *req_xattr_value
,
51 size_t req_xattr_value_len
, char *digest
);
52 int evm_calc_hash(struct dentry
*dentry
, const char *req_xattr_name
,
53 const char *req_xattr_value
,
54 size_t req_xattr_value_len
, char *digest
);
55 int evm_init_hmac(struct inode
*inode
, const struct xattr
*xattr
,
57 int evm_init_secfs(void);