LXR linux/include/linux/evm.h

   1/* SPDX-License-Identifier: GPL-2.0 */
   2/*
   3 * evm.h
   4 *
   5 * Copyright (c) 2009 IBM Corporation
   6 * Author: Mimi Zohar <zohar@us.ibm.com>
   7 */
   8
   9#ifndef _LINUX_EVM_H
  10#define _LINUX_EVM_H
  11
  12#include <linux/integrity.h>
  13#include <linux/xattr.h>
  14
  15struct integrity_iint_cache;
  16
  17#ifdef CONFIG_EVM
  18extern int evm_set_key(void *key, size_t keylen);
  19extern enum integrity_status evm_verifyxattr(struct dentry *dentry,
  20                                             const char *xattr_name,
  21                                             void *xattr_value,
  22                                             size_t xattr_value_len,
  23                                             struct integrity_iint_cache *iint);
  24extern int evm_inode_setattr(struct dentry *dentry, struct iattr *attr);
  25extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid);
  26extern int evm_inode_setxattr(struct user_namespace *mnt_userns,
  27                              struct dentry *dentry, const char *name,
  28                              const void *value, size_t size);
  29extern void evm_inode_post_setxattr(struct dentry *dentry,
  30                                    const char *xattr_name,
  31                                    const void *xattr_value,
  32                                    size_t xattr_value_len);
  33extern int evm_inode_removexattr(struct user_namespace *mnt_userns,
  34                                 struct dentry *dentry, const char *xattr_name);
  35extern void evm_inode_post_removexattr(struct dentry *dentry,
  36                                       const char *xattr_name);
  37extern int evm_inode_init_security(struct inode *inode,
  38                                   const struct xattr *xattr_array,
  39                                   struct xattr *evm);
  40extern bool evm_revalidate_status(const char *xattr_name);
  41extern int evm_protected_xattr_if_enabled(const char *req_xattr_name);
  42extern int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
  43                                     int buffer_size, char type,
  44                                     bool canonical_fmt);
  45#ifdef CONFIG_FS_POSIX_ACL
  46extern int posix_xattr_acl(const char *xattrname);
  47#else
  48static inline int posix_xattr_acl(const char *xattrname)
  49{
  50        return 0;
  51}
  52#endif
  53#else
  54
  55static inline int evm_set_key(void *key, size_t keylen)
  56{
  57        return -EOPNOTSUPP;
  58}
  59
  60#ifdef CONFIG_INTEGRITY
  61static inline enum integrity_status evm_verifyxattr(struct dentry *dentry,
  62                                                    const char *xattr_name,
  63                                                    void *xattr_value,
  64                                                    size_t xattr_value_len,
  65                                        struct integrity_iint_cache *iint)
  66{
  67        return INTEGRITY_UNKNOWN;
  68}
  69#endif
  70
  71static inline int evm_inode_setattr(struct dentry *dentry, struct iattr *attr)
  72{
  73        return 0;
  74}
  75
  76static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)
  77{
  78        return;
  79}
  80
  81static inline int evm_inode_setxattr(struct user_namespace *mnt_userns,
  82                                     struct dentry *dentry, const char *name,
  83                                     const void *value, size_t size)
  84{
  85        return 0;
  86}
  87
  88static inline void evm_inode_post_setxattr(struct dentry *dentry,
  89                                           const char *xattr_name,
  90                                           const void *xattr_value,
  91                                           size_t xattr_value_len)
  92{
  93        return;
  94}
  95
  96static inline int evm_inode_removexattr(struct user_namespace *mnt_userns,
  97                                        struct dentry *dentry,
  98                                        const char *xattr_name)
  99{
 100        return 0;
 101}
 102
 103static inline void evm_inode_post_removexattr(struct dentry *dentry,
 104                                              const char *xattr_name)
 105{
 106        return;
 107}
 108
 109static inline int evm_inode_init_security(struct inode *inode,
 110                                          const struct xattr *xattr_array,
 111                                          struct xattr *evm)
 112{
 113        return 0;
 114}
 115
 116static inline bool evm_revalidate_status(const char *xattr_name)
 117{
 118        return false;
 119}
 120
 121static inline int evm_protected_xattr_if_enabled(const char *req_xattr_name)
 122{
 123        return false;
 124}
 125
 126static inline int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
 127                                            int buffer_size, char type,
 128                                            bool canonical_fmt)
 129{
 130        return -EOPNOTSUPP;
 131}
 132
 133#endif /* CONFIG_EVM */
 134#endif /* LINUX_EVM_H */
 135