EVM: Add support for portable signature format

[mirror_ubuntu-bionic-kernel.git] / security / integrity / integrity.h

diff --git a/security/integrity/integrity.h b/security/integrity/integrity.h
index e1bf040fb110959bcc53a2be840ffd32a31d8c3d..e324bf98c856c48d496fe49d04650b0a00621a75 100644 (file)
--- a/security/integrity/integrity.h
+++ b/security/integrity/integrity.h
@@ -33,6 +33,7 @@
 #define IMA_DIGSIG_REQUIRED    0x02000000
 #define IMA_PERMIT_DIRECTIO    0x04000000
 #define IMA_NEW_FILE           0x08000000
+#define EVM_IMMUTABLE_DIGSIG   0x10000000
 
 #define IMA_DO_MASK            (IMA_MEASURE | IMA_APPRAISE | IMA_AUDIT | \
                                 IMA_APPRAISE_SUBMASK)
@@ -58,6 +59,7 @@ enum evm_ima_xattr_type {
        EVM_XATTR_HMAC,
        EVM_IMA_XATTR_DIGSIG,
        IMA_XATTR_DIGEST_NG,
+       EVM_XATTR_PORTABLE_DIGSIG,
        IMA_XATTR_LAST
 };