fs/crypto/policy.c

3  * Encryption policy functions for per-file encryption support.
21  * fscrypt_policies_equal() - check whether two encryption policies are the same
64  * Return %true if the given combination of encryption modes is supported for v1
65  * (and later) encryption policies.
67  * Do *not* add anything new here, since v1 encryption policies are deprecated.
133 	 * IV_INO_LBLK_* with other encryption modes arises.  in supported_iv_ino_lblk_policy()
176 			     "Unsupported encryption modes (contents %d, filenames %d)",  in fscrypt_supported_v1_policy()
184 		fscrypt_warn(inode, "Unsupported encryption flags (0x%02x)",  in fscrypt_supported_v1_policy()
212 			     "Unsupported encryption modes (contents %d, filenames %d)",  in fscrypt_supported_v2_policy()
222 		fscrypt_warn(inode, "Unsupported encryption flags (0x%02x)",  in fscrypt_supported_v2_policy()
231 		fscrypt_warn(inode, "Mutually exclusive encryption flags (0x%02x)",  in fscrypt_supported_v2_policy()
258 		fscrypt_warn(inode, "Reserved bits set in encryption policy");  in fscrypt_supported_v2_policy()
266  * fscrypt_supported_policy() - check whether an encryption policy is supported
267  * @policy_u: the encryption policy
270  * Given an encryption policy, check whether all its encryption modes and other
296  * encryption policy.  @nonce must be a new random nonce.
405 /* Retrieve an inode's encryption policy */
443 		 * The original encryption policy version provided no way of  in set_encryption_policy()
447 		 * encryption policy version fixes this and also implies use of  in set_encryption_policy()
453 …pr_warn_once("%s (pid %d) is setting deprecated v1 encryption policy; recommend upgrading to v2.\n…  in set_encryption_policy()
462 …pr_warn_once("%s (pid %d) is setting an IV_INO_LBLK_32 encryption policy.  This should only be use…  in set_encryption_policy()
530 		/* The file already uses a different encryption policy. */  in fscrypt_ioctl_set_policy()
592 /* FS_IOC_GET_ENCRYPTION_NONCE: retrieve file's encryption nonce for testing */
612  * fscrypt_has_permitted_context() - is a file's encryption policy permitted
624  * same encryption policy.  The pre-access check is needed to detect potentially
650 	 * encryption policy.  Compare the fscrypt_info structs if the keys are  in fscrypt_has_permitted_context()
675 	 * encryption policy, so that files with an unrecognized encryption  in fscrypt_has_permitted_context()
689  * Return the encryption policy that new files in the directory will inherit, or
708  * fscrypt_context_for_new_inode() - create an encryption context for a new inode