1 /*
2 * evm.h
3 *
4 * Copyright (c) 2009 IBM Corporation
5 * Author: Mimi Zohar <zohar@us.ibm.com>
6 */
7
8 #ifndef _LINUX_EVM_H
9 #define _LINUX_EVM_H
10
11 #include <linux/integrity.h>
12 #include <linux/xattr.h>
13
14 struct integrity_iint_cache;
15
16 #ifdef CONFIG_EVM
17 extern int evm_set_key(void *key, size_t keylen);
18 extern enum integrity_status evm_verifyxattr(struct dentry *dentry,
19 const char *xattr_name,
20 void *xattr_value,
21 size_t xattr_value_len,
22 struct integrity_iint_cache *iint);
23 extern int evm_inode_setattr(struct dentry *dentry, struct iattr *attr);
24 extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid);
25 extern int evm_inode_setxattr(struct dentry *dentry, const char *name,
26 const void *value, size_t size);
27 extern void evm_inode_post_setxattr(struct dentry *dentry,
28 const char *xattr_name,
29 const void *xattr_value,
30 size_t xattr_value_len);
31 extern int evm_inode_removexattr(struct dentry *dentry, const char *xattr_name);
32 extern void evm_inode_post_removexattr(struct dentry *dentry,
33 const char *xattr_name);
34 extern int evm_inode_init_security(struct inode *inode,
35 const struct xattr *xattr_array,
36 struct xattr *evm);
37 #ifdef CONFIG_FS_POSIX_ACL
38 extern int posix_xattr_acl(const char *xattrname);
39 #else
posix_xattr_acl(const char * xattrname)40 static inline int posix_xattr_acl(const char *xattrname)
41 {
42 return 0;
43 }
44 #endif
45 #else
46
evm_set_key(void * key,size_t keylen)47 static inline int evm_set_key(void *key, size_t keylen)
48 {
49 return -EOPNOTSUPP;
50 }
51
52 #ifdef CONFIG_INTEGRITY
evm_verifyxattr(struct dentry * dentry,const char * xattr_name,void * xattr_value,size_t xattr_value_len,struct integrity_iint_cache * iint)53 static inline enum integrity_status evm_verifyxattr(struct dentry *dentry,
54 const char *xattr_name,
55 void *xattr_value,
56 size_t xattr_value_len,
57 struct integrity_iint_cache *iint)
58 {
59 return INTEGRITY_UNKNOWN;
60 }
61 #endif
62
evm_inode_setattr(struct dentry * dentry,struct iattr * attr)63 static inline int evm_inode_setattr(struct dentry *dentry, struct iattr *attr)
64 {
65 return 0;
66 }
67
evm_inode_post_setattr(struct dentry * dentry,int ia_valid)68 static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)
69 {
70 return;
71 }
72
evm_inode_setxattr(struct dentry * dentry,const char * name,const void * value,size_t size)73 static inline int evm_inode_setxattr(struct dentry *dentry, const char *name,
74 const void *value, size_t size)
75 {
76 return 0;
77 }
78
evm_inode_post_setxattr(struct dentry * dentry,const char * xattr_name,const void * xattr_value,size_t xattr_value_len)79 static inline void evm_inode_post_setxattr(struct dentry *dentry,
80 const char *xattr_name,
81 const void *xattr_value,
82 size_t xattr_value_len)
83 {
84 return;
85 }
86
evm_inode_removexattr(struct dentry * dentry,const char * xattr_name)87 static inline int evm_inode_removexattr(struct dentry *dentry,
88 const char *xattr_name)
89 {
90 return 0;
91 }
92
evm_inode_post_removexattr(struct dentry * dentry,const char * xattr_name)93 static inline void evm_inode_post_removexattr(struct dentry *dentry,
94 const char *xattr_name)
95 {
96 return;
97 }
98
evm_inode_init_security(struct inode * inode,const struct xattr * xattr_array,struct xattr * evm)99 static inline int evm_inode_init_security(struct inode *inode,
100 const struct xattr *xattr_array,
101 struct xattr *evm)
102 {
103 return 0;
104 }
105
106 #endif /* CONFIG_EVM */
107 #endif /* LINUX_EVM_H */
108