1 /* SPDX-License-Identifier: GPL-2.0 */ 2 /* 3 * evm.h 4 * 5 * Copyright (c) 2009 IBM Corporation 6 * Author: Mimi Zohar <zohar@us.ibm.com> 7 */ 8 9 #ifndef _LINUX_EVM_H 10 #define _LINUX_EVM_H 11 12 #include <linux/integrity.h> 13 #include <linux/xattr.h> 14 15 struct integrity_iint_cache; 16 17 #ifdef CONFIG_EVM 18 extern int evm_set_key(void *key, size_t keylen); 19 extern enum integrity_status evm_verifyxattr(struct dentry *dentry, 20 const char *xattr_name, 21 void *xattr_value, 22 size_t xattr_value_len, 23 struct integrity_iint_cache *iint); 24 extern int evm_inode_setattr(struct mnt_idmap *idmap, 25 struct dentry *dentry, struct iattr *attr); 26 extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid); 27 extern int evm_inode_setxattr(struct mnt_idmap *idmap, 28 struct dentry *dentry, const char *name, 29 const void *value, size_t size); 30 extern void evm_inode_post_setxattr(struct dentry *dentry, 31 const char *xattr_name, 32 const void *xattr_value, 33 size_t xattr_value_len); 34 extern int evm_inode_removexattr(struct mnt_idmap *idmap, 35 struct dentry *dentry, const char *xattr_name); 36 extern void evm_inode_post_removexattr(struct dentry *dentry, 37 const char *xattr_name); evm_inode_post_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)38 static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap, 39 struct dentry *dentry, 40 const char *acl_name) 41 { 42 evm_inode_post_removexattr(dentry, acl_name); 43 } 44 extern int evm_inode_set_acl(struct mnt_idmap *idmap, 45 struct dentry *dentry, const char *acl_name, 46 struct posix_acl *kacl); evm_inode_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)47 static inline int evm_inode_remove_acl(struct mnt_idmap *idmap, 48 struct dentry *dentry, 49 const char *acl_name) 50 { 51 return evm_inode_set_acl(idmap, dentry, acl_name, NULL); 52 } evm_inode_post_set_acl(struct dentry * dentry,const char * acl_name,struct posix_acl * kacl)53 static inline void evm_inode_post_set_acl(struct dentry *dentry, 54 const char *acl_name, 55 struct posix_acl *kacl) 56 { 57 return evm_inode_post_setxattr(dentry, acl_name, NULL, 0); 58 } 59 extern int evm_inode_init_security(struct inode *inode, 60 const struct xattr *xattr_array, 61 struct xattr *evm); 62 extern bool evm_revalidate_status(const char *xattr_name); 63 extern int evm_protected_xattr_if_enabled(const char *req_xattr_name); 64 extern int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer, 65 int buffer_size, char type, 66 bool canonical_fmt); 67 #ifdef CONFIG_FS_POSIX_ACL 68 extern int posix_xattr_acl(const char *xattrname); 69 #else posix_xattr_acl(const char * xattrname)70 static inline int posix_xattr_acl(const char *xattrname) 71 { 72 return 0; 73 } 74 #endif 75 #else 76 evm_set_key(void * key,size_t keylen)77 static inline int evm_set_key(void *key, size_t keylen) 78 { 79 return -EOPNOTSUPP; 80 } 81 82 #ifdef CONFIG_INTEGRITY evm_verifyxattr(struct dentry * dentry,const char * xattr_name,void * xattr_value,size_t xattr_value_len,struct integrity_iint_cache * iint)83 static inline enum integrity_status evm_verifyxattr(struct dentry *dentry, 84 const char *xattr_name, 85 void *xattr_value, 86 size_t xattr_value_len, 87 struct integrity_iint_cache *iint) 88 { 89 return INTEGRITY_UNKNOWN; 90 } 91 #endif 92 evm_inode_setattr(struct mnt_idmap * idmap,struct dentry * dentry,struct iattr * attr)93 static inline int evm_inode_setattr(struct mnt_idmap *idmap, 94 struct dentry *dentry, struct iattr *attr) 95 { 96 return 0; 97 } 98 evm_inode_post_setattr(struct dentry * dentry,int ia_valid)99 static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid) 100 { 101 return; 102 } 103 evm_inode_setxattr(struct mnt_idmap * idmap,struct dentry * dentry,const char * name,const void * value,size_t size)104 static inline int evm_inode_setxattr(struct mnt_idmap *idmap, 105 struct dentry *dentry, const char *name, 106 const void *value, size_t size) 107 { 108 return 0; 109 } 110 evm_inode_post_setxattr(struct dentry * dentry,const char * xattr_name,const void * xattr_value,size_t xattr_value_len)111 static inline void evm_inode_post_setxattr(struct dentry *dentry, 112 const char *xattr_name, 113 const void *xattr_value, 114 size_t xattr_value_len) 115 { 116 return; 117 } 118 evm_inode_removexattr(struct mnt_idmap * idmap,struct dentry * dentry,const char * xattr_name)119 static inline int evm_inode_removexattr(struct mnt_idmap *idmap, 120 struct dentry *dentry, 121 const char *xattr_name) 122 { 123 return 0; 124 } 125 evm_inode_post_removexattr(struct dentry * dentry,const char * xattr_name)126 static inline void evm_inode_post_removexattr(struct dentry *dentry, 127 const char *xattr_name) 128 { 129 return; 130 } 131 evm_inode_post_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)132 static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap, 133 struct dentry *dentry, 134 const char *acl_name) 135 { 136 return; 137 } 138 evm_inode_set_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name,struct posix_acl * kacl)139 static inline int evm_inode_set_acl(struct mnt_idmap *idmap, 140 struct dentry *dentry, const char *acl_name, 141 struct posix_acl *kacl) 142 { 143 return 0; 144 } 145 evm_inode_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)146 static inline int evm_inode_remove_acl(struct mnt_idmap *idmap, 147 struct dentry *dentry, 148 const char *acl_name) 149 { 150 return 0; 151 } 152 evm_inode_post_set_acl(struct dentry * dentry,const char * acl_name,struct posix_acl * kacl)153 static inline void evm_inode_post_set_acl(struct dentry *dentry, 154 const char *acl_name, 155 struct posix_acl *kacl) 156 { 157 return; 158 } 159 evm_inode_init_security(struct inode * inode,const struct xattr * xattr_array,struct xattr * evm)160 static inline int evm_inode_init_security(struct inode *inode, 161 const struct xattr *xattr_array, 162 struct xattr *evm) 163 { 164 return 0; 165 } 166 evm_revalidate_status(const char * xattr_name)167 static inline bool evm_revalidate_status(const char *xattr_name) 168 { 169 return false; 170 } 171 evm_protected_xattr_if_enabled(const char * req_xattr_name)172 static inline int evm_protected_xattr_if_enabled(const char *req_xattr_name) 173 { 174 return false; 175 } 176 evm_read_protected_xattrs(struct dentry * dentry,u8 * buffer,int buffer_size,char type,bool canonical_fmt)177 static inline int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer, 178 int buffer_size, char type, 179 bool canonical_fmt) 180 { 181 return -EOPNOTSUPP; 182 } 183 184 #endif /* CONFIG_EVM */ 185 #endif /* LINUX_EVM_H */ 186