evm.h 1.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172
  1. /*
  2. * Copyright (C) 2005-2010 IBM Corporation
  3. *
  4. * Authors:
  5. * Mimi Zohar <zohar@us.ibm.com>
  6. * Kylene Hall <kjhall@us.ibm.com>
  7. *
  8. * This program is free software; you can redistribute it and/or modify
  9. * it under the terms of the GNU General Public License as published by
  10. * the Free Software Foundation, version 2 of the License.
  11. *
  12. * File: evm.h
  13. *
  14. */
  15. #ifndef __INTEGRITY_EVM_H
  16. #define __INTEGRITY_EVM_H
  17. #include <linux/xattr.h>
  18. #include <linux/security.h>
  19. #include "../integrity.h"
  20. #define EVM_INIT_HMAC 0x0001
  21. #define EVM_INIT_X509 0x0002
  22. #define EVM_ALLOW_METADATA_WRITES 0x0004
  23. #define EVM_SETUP_COMPLETE 0x80000000 /* userland has signaled key load */
  24. #define EVM_KEY_MASK (EVM_INIT_HMAC | EVM_INIT_X509)
  25. #define EVM_INIT_MASK (EVM_INIT_HMAC | EVM_INIT_X509 | EVM_SETUP_COMPLETE | \
  26. EVM_ALLOW_METADATA_WRITES)
  27. struct xattr_list {
  28. struct list_head list;
  29. char *name;
  30. };
  31. extern int evm_initialized;
  32. #define EVM_ATTR_FSUUID 0x0001
  33. extern int evm_hmac_attrs;
  34. extern struct crypto_shash *hmac_tfm;
  35. extern struct crypto_shash *hash_tfm;
  36. /* List of EVM protected security xattrs */
  37. extern struct list_head evm_config_xattrnames;
  38. struct evm_digest {
  39. struct ima_digest_data hdr;
  40. char digest[IMA_MAX_DIGEST_SIZE];
  41. } __packed;
  42. int evm_init_key(void);
  43. int evm_update_evmxattr(struct dentry *dentry,
  44. const char *req_xattr_name,
  45. const char *req_xattr_value,
  46. size_t req_xattr_value_len);
  47. int evm_calc_hmac(struct dentry *dentry, const char *req_xattr_name,
  48. const char *req_xattr_value,
  49. size_t req_xattr_value_len, struct evm_digest *data);
  50. int evm_calc_hash(struct dentry *dentry, const char *req_xattr_name,
  51. const char *req_xattr_value,
  52. size_t req_xattr_value_len, char type,
  53. struct evm_digest *data);
  54. int evm_init_hmac(struct inode *inode, const struct xattr *xattr,
  55. char *hmac_val);
  56. int evm_init_secfs(void);
  57. #endif