| /security/integrity/ima/ |
| D | ima_modsig.c | 18 struct modsig { struct
61 struct modsig **modsig) in ima_read_modsig() argument
65 struct modsig *hdr; in ima_read_modsig()
105 *modsig = hdr; in ima_read_modsig()
120 void ima_collect_modsig(struct modsig *modsig, const void *buf, loff_t size) in ima_collect_modsig() argument
128 size -= modsig->raw_pkcs7_len + strlen(MODULE_SIG_STRING) + in ima_collect_modsig()
130 rc = pkcs7_supply_detached_data(modsig->pkcs7_msg, buf, size); in ima_collect_modsig()
135 rc = pkcs7_get_digest(modsig->pkcs7_msg, &modsig->digest, in ima_collect_modsig()
136 &modsig->digest_size, &modsig->hash_algo); in ima_collect_modsig()
139 int ima_modsig_verify(struct key *keyring, const struct modsig *modsig) in ima_modsig_verify() argument
[all …]
|
| D | ima.h | 64 const struct modsig *modsig; member
207 struct modsig;
216 enum hash_algo algo, struct modsig *modsig);
220 int xattr_len, const struct modsig *modsig, int pcr,
262 int xattr_len, const struct modsig *modsig);
279 const struct modsig *modsig) in ima_appraise_measurement() argument
319 struct modsig **modsig);
320 void ima_collect_modsig(struct modsig *modsig, const void *buf, loff_t size);
321 int ima_get_modsig_digest(const struct modsig *modsig, enum hash_algo *algo,
323 int ima_get_raw_modsig(const struct modsig *modsig, const void **data,
[all …]
|
| D | ima_api.c | 208 enum hash_algo algo, struct modsig *modsig) in ima_collect_measurement() argument
228 if (modsig) in ima_collect_measurement()
229 ima_collect_modsig(modsig, buf, size); in ima_collect_measurement()
301 int xattr_len, const struct modsig *modsig, int pcr, in ima_store_measurement() argument
314 .modsig = modsig }; in ima_store_measurement()
323 if (iint->measured_pcrs & (0x1 << pcr) && !modsig) in ima_store_measurement()
|
| D | ima_appraise.c | 292 static int modsig_verify(enum ima_hooks func, const struct modsig *modsig, in modsig_verify() argument
297 rc = integrity_modsig_verify(INTEGRITY_KEYRING_IMA, modsig); in modsig_verify()
301 modsig); in modsig_verify()
324 int xattr_len, const struct modsig *modsig) in ima_appraise_measurement() argument
332 bool try_modsig = iint->flags & IMA_MODSIG_ALLOWED && modsig; in ima_appraise_measurement()
388 rc = modsig_verify(func, modsig, &status, &cause); in ima_appraise_measurement()
|
| D | ima_main.c | 206 struct modsig *modsig = NULL; in process_measurement() local
330 rc = ima_read_modsig(func, buf, size, &modsig); in process_measurement()
340 rc = ima_collect_measurement(iint, file, buf, size, hash_algo, modsig); in process_measurement()
349 xattr_value, xattr_len, modsig, pcr, in process_measurement()
354 xattr_value, xattr_len, modsig); in process_measurement()
371 ima_free_modsig(modsig); in process_measurement()
|
| D | ima_template_lib.c | 361 if (!event_data->modsig) in ima_eventdigest_modsig_init()
372 rc = ima_get_modsig_digest(event_data->modsig, &hash_algo, in ima_eventdigest_modsig_init()
475 if (!event_data->modsig) in ima_eventmodsig_init()
482 rc = ima_get_raw_modsig(event_data->modsig, &data, &data_len); in ima_eventmodsig_init()
|
| D | Kconfig | 237 The modsig keyword can be used in the IMA policy to allow a hook
|
| /security/integrity/ |
| D | integrity.h | 153 struct modsig;
159 int integrity_modsig_verify(unsigned int id, const struct modsig *modsig);
175 const struct modsig *modsig) in integrity_modsig_verify() argument
206 int ima_modsig_verify(struct key *keyring, const struct modsig *modsig);
209 const struct modsig *modsig) in ima_modsig_verify() argument
|
| D | digsig.c | 86 int integrity_modsig_verify(const unsigned int id, const struct modsig *modsig) in integrity_modsig_verify() argument
94 return ima_modsig_verify(keyring, modsig); in integrity_modsig_verify()
|