1*4882a593Smuzhiyun /* SPDX-License-Identifier: GPL-2.0 */
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * evm.h
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (c) 2009 IBM Corporation
6*4882a593Smuzhiyun * Author: Mimi Zohar <zohar@us.ibm.com>
7*4882a593Smuzhiyun */
8*4882a593Smuzhiyun
9*4882a593Smuzhiyun #ifndef _LINUX_EVM_H
10*4882a593Smuzhiyun #define _LINUX_EVM_H
11*4882a593Smuzhiyun
12*4882a593Smuzhiyun #include <linux/integrity.h>
13*4882a593Smuzhiyun #include <linux/xattr.h>
14*4882a593Smuzhiyun
15*4882a593Smuzhiyun struct integrity_iint_cache;
16*4882a593Smuzhiyun
17*4882a593Smuzhiyun #ifdef CONFIG_EVM
18*4882a593Smuzhiyun extern int evm_set_key(void *key, size_t keylen);
19*4882a593Smuzhiyun extern enum integrity_status evm_verifyxattr(struct dentry *dentry,
20*4882a593Smuzhiyun const char *xattr_name,
21*4882a593Smuzhiyun void *xattr_value,
22*4882a593Smuzhiyun size_t xattr_value_len,
23*4882a593Smuzhiyun struct integrity_iint_cache *iint);
24*4882a593Smuzhiyun extern int evm_inode_setattr(struct dentry *dentry, struct iattr *attr);
25*4882a593Smuzhiyun extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid);
26*4882a593Smuzhiyun extern int evm_inode_setxattr(struct dentry *dentry, const char *name,
27*4882a593Smuzhiyun const void *value, size_t size);
28*4882a593Smuzhiyun extern void evm_inode_post_setxattr(struct dentry *dentry,
29*4882a593Smuzhiyun const char *xattr_name,
30*4882a593Smuzhiyun const void *xattr_value,
31*4882a593Smuzhiyun size_t xattr_value_len);
32*4882a593Smuzhiyun extern int evm_inode_removexattr(struct dentry *dentry, const char *xattr_name);
33*4882a593Smuzhiyun extern void evm_inode_post_removexattr(struct dentry *dentry,
34*4882a593Smuzhiyun const char *xattr_name);
35*4882a593Smuzhiyun extern int evm_inode_init_security(struct inode *inode,
36*4882a593Smuzhiyun const struct xattr *xattr_array,
37*4882a593Smuzhiyun struct xattr *evm);
38*4882a593Smuzhiyun #ifdef CONFIG_FS_POSIX_ACL
39*4882a593Smuzhiyun extern int posix_xattr_acl(const char *xattrname);
40*4882a593Smuzhiyun #else
posix_xattr_acl(const char * xattrname)41*4882a593Smuzhiyun static inline int posix_xattr_acl(const char *xattrname)
42*4882a593Smuzhiyun {
43*4882a593Smuzhiyun return 0;
44*4882a593Smuzhiyun }
45*4882a593Smuzhiyun #endif
46*4882a593Smuzhiyun #else
47*4882a593Smuzhiyun
evm_set_key(void * key,size_t keylen)48*4882a593Smuzhiyun static inline int evm_set_key(void *key, size_t keylen)
49*4882a593Smuzhiyun {
50*4882a593Smuzhiyun return -EOPNOTSUPP;
51*4882a593Smuzhiyun }
52*4882a593Smuzhiyun
53*4882a593Smuzhiyun #ifdef CONFIG_INTEGRITY
evm_verifyxattr(struct dentry * dentry,const char * xattr_name,void * xattr_value,size_t xattr_value_len,struct integrity_iint_cache * iint)54*4882a593Smuzhiyun static inline enum integrity_status evm_verifyxattr(struct dentry *dentry,
55*4882a593Smuzhiyun const char *xattr_name,
56*4882a593Smuzhiyun void *xattr_value,
57*4882a593Smuzhiyun size_t xattr_value_len,
58*4882a593Smuzhiyun struct integrity_iint_cache *iint)
59*4882a593Smuzhiyun {
60*4882a593Smuzhiyun return INTEGRITY_UNKNOWN;
61*4882a593Smuzhiyun }
62*4882a593Smuzhiyun #endif
63*4882a593Smuzhiyun
evm_inode_setattr(struct dentry * dentry,struct iattr * attr)64*4882a593Smuzhiyun static inline int evm_inode_setattr(struct dentry *dentry, struct iattr *attr)
65*4882a593Smuzhiyun {
66*4882a593Smuzhiyun return 0;
67*4882a593Smuzhiyun }
68*4882a593Smuzhiyun
evm_inode_post_setattr(struct dentry * dentry,int ia_valid)69*4882a593Smuzhiyun static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)
70*4882a593Smuzhiyun {
71*4882a593Smuzhiyun return;
72*4882a593Smuzhiyun }
73*4882a593Smuzhiyun
evm_inode_setxattr(struct dentry * dentry,const char * name,const void * value,size_t size)74*4882a593Smuzhiyun static inline int evm_inode_setxattr(struct dentry *dentry, const char *name,
75*4882a593Smuzhiyun const void *value, size_t size)
76*4882a593Smuzhiyun {
77*4882a593Smuzhiyun return 0;
78*4882a593Smuzhiyun }
79*4882a593Smuzhiyun
evm_inode_post_setxattr(struct dentry * dentry,const char * xattr_name,const void * xattr_value,size_t xattr_value_len)80*4882a593Smuzhiyun static inline void evm_inode_post_setxattr(struct dentry *dentry,
81*4882a593Smuzhiyun const char *xattr_name,
82*4882a593Smuzhiyun const void *xattr_value,
83*4882a593Smuzhiyun size_t xattr_value_len)
84*4882a593Smuzhiyun {
85*4882a593Smuzhiyun return;
86*4882a593Smuzhiyun }
87*4882a593Smuzhiyun
evm_inode_removexattr(struct dentry * dentry,const char * xattr_name)88*4882a593Smuzhiyun static inline int evm_inode_removexattr(struct dentry *dentry,
89*4882a593Smuzhiyun const char *xattr_name)
90*4882a593Smuzhiyun {
91*4882a593Smuzhiyun return 0;
92*4882a593Smuzhiyun }
93*4882a593Smuzhiyun
evm_inode_post_removexattr(struct dentry * dentry,const char * xattr_name)94*4882a593Smuzhiyun static inline void evm_inode_post_removexattr(struct dentry *dentry,
95*4882a593Smuzhiyun const char *xattr_name)
96*4882a593Smuzhiyun {
97*4882a593Smuzhiyun return;
98*4882a593Smuzhiyun }
99*4882a593Smuzhiyun
evm_inode_init_security(struct inode * inode,const struct xattr * xattr_array,struct xattr * evm)100*4882a593Smuzhiyun static inline int evm_inode_init_security(struct inode *inode,
101*4882a593Smuzhiyun const struct xattr *xattr_array,
102*4882a593Smuzhiyun struct xattr *evm)
103*4882a593Smuzhiyun {
104*4882a593Smuzhiyun return 0;
105*4882a593Smuzhiyun }
106*4882a593Smuzhiyun
107*4882a593Smuzhiyun #endif /* CONFIG_EVM */
108*4882a593Smuzhiyun #endif /* LINUX_EVM_H */
109