137 static int evm_find_protected_xattrs(struct dentry *dentry)  in evm_find_protected_xattrs()  argument
139 	struct inode *inode = d_backing_inode(dentry);  in evm_find_protected_xattrs()
148 		error = __vfs_getxattr(dentry, inode, xattr->name, NULL, 0);  in evm_find_protected_xattrs()
173 static enum integrity_status evm_verify_hmac(struct dentry *dentry,  in evm_verify_hmac()  argument
193 	rc = vfs_getxattr_alloc(&init_user_ns, dentry, XATTR_NAME_EVM,  in evm_verify_hmac()
198 			rc = evm_find_protected_xattrs(dentry);  in evm_verify_hmac()
220 		rc = evm_calc_hmac(dentry, xattr_name, xattr_value,  in evm_verify_hmac()
241 		rc = evm_calc_hash(dentry, xattr_name, xattr_value,  in evm_verify_hmac()
249 			inode = d_backing_inode(dentry);  in evm_verify_hmac()
258 				evm_update_evmxattr(dentry, xattr_name,  in evm_verify_hmac()
338 int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,  in evm_read_protected_xattrs()  argument
345 		rc = __vfs_getxattr(dentry, d_backing_inode(dentry),  in evm_read_protected_xattrs()
374 				rc = __vfs_getxattr(dentry,  in evm_read_protected_xattrs()
375 					d_backing_inode(dentry), xattr->name,  in evm_read_protected_xattrs()
409 enum integrity_status evm_verifyxattr(struct dentry *dentry,  in evm_verifyxattr()  argument
418 		iint = integrity_iint_find(d_backing_inode(dentry));  in evm_verifyxattr()
422 	return evm_verify_hmac(dentry, xattr_name, xattr_value,  in evm_verifyxattr()
434 static enum integrity_status evm_verify_current_integrity(struct dentry *dentry)  in evm_verify_current_integrity()  argument
436 	struct inode *inode = d_backing_inode(dentry);  in evm_verify_current_integrity()
440 	return evm_verify_hmac(dentry, NULL, NULL, 0, NULL);  in evm_verify_current_integrity()
456 				struct dentry *dentry, const char *xattr_name,  in evm_xattr_acl_change()  argument
462 	struct inode *inode = d_backing_inode(dentry);  in evm_xattr_acl_change()
505 			    struct dentry *dentry, const char *xattr_name,  in evm_xattr_change()  argument
512 		return evm_xattr_acl_change(mnt_userns, dentry, xattr_name,  in evm_xattr_change()
515 	rc = vfs_getxattr_alloc(&init_user_ns, dentry, xattr_name, &xattr_data,  in evm_xattr_change()
542 			     struct dentry *dentry, const char *xattr_name,  in evm_protect_xattr()  argument
553 		evm_status = evm_verify_current_integrity(dentry);  in evm_protect_xattr()
560 	evm_status = evm_verify_current_integrity(dentry);  in evm_protect_xattr()
568 		iint = integrity_iint_find(d_backing_inode(dentry));  in evm_protect_xattr()
573 		if (dentry->d_sb->s_magic == TMPFS_MAGIC  in evm_protect_xattr()
574 		    || dentry->d_sb->s_magic == SYSFS_MAGIC)  in evm_protect_xattr()
578 				    dentry->d_inode, dentry->d_name.name,  in evm_protect_xattr()
597 	    !evm_xattr_change(mnt_userns, dentry, xattr_name, xattr_value,  in evm_protect_xattr()
603 		integrity_audit_msg(AUDIT_INTEGRITY_METADATA, d_backing_inode(dentry),  in evm_protect_xattr()
604 				    dentry->d_name.name, "appraise_metadata",  in evm_protect_xattr()
624 int evm_inode_setxattr(struct user_namespace *mnt_userns, struct dentry *dentry,  in evm_inode_setxattr()  argument
643 	return evm_protect_xattr(mnt_userns, dentry, xattr_name, xattr_value,  in evm_inode_setxattr()
657 			  struct dentry *dentry, const char *xattr_name)  in evm_inode_removexattr()  argument
665 	return evm_protect_xattr(mnt_userns, dentry, xattr_name, NULL, 0);  in evm_inode_removexattr()
715 void evm_inode_post_setxattr(struct dentry *dentry, const char *xattr_name,  in evm_inode_post_setxattr()  argument
721 	evm_reset_status(dentry->d_inode);  in evm_inode_post_setxattr()
729 	evm_update_evmxattr(dentry, xattr_name, xattr_value, xattr_value_len);  in evm_inode_post_setxattr()
742 void evm_inode_post_removexattr(struct dentry *dentry, const char *xattr_name)  in evm_inode_post_removexattr()  argument
747 	evm_reset_status(dentry->d_inode);  in evm_inode_post_removexattr()
755 	evm_update_evmxattr(dentry, xattr_name, NULL, 0);  in evm_inode_post_removexattr()
758 static int evm_attr_change(struct dentry *dentry, struct iattr *attr)  in evm_attr_change()  argument
760 	struct inode *inode = d_backing_inode(dentry);  in evm_attr_change()
780 int evm_inode_setattr(struct dentry *dentry, struct iattr *attr)  in evm_inode_setattr()  argument
793 	evm_status = evm_verify_current_integrity(dentry);  in evm_inode_setattr()
806 	    !evm_attr_change(dentry, attr))  in evm_inode_setattr()
809 	integrity_audit_msg(AUDIT_INTEGRITY_METADATA, d_backing_inode(dentry),  in evm_inode_setattr()
810 			    dentry->d_name.name, "appraise_metadata",  in evm_inode_setattr()
826 void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)  in evm_inode_post_setattr()  argument
831 	evm_reset_status(dentry->d_inode);  in evm_inode_post_setattr()
837 		evm_update_evmxattr(dentry, NULL, NULL, 0);  in evm_inode_post_setattr()