1 /* SPDX-License-Identifier: GPL-2.0 */
2 /*
3 * evm.h
4 *
5 * Copyright (c) 2009 IBM Corporation
6 * Author: Mimi Zohar <zohar@us.ibm.com>
7 */
8
9 #ifndef _LINUX_EVM_H
10 #define _LINUX_EVM_H
11
12 #include <linux/integrity.h>
13 #include <linux/xattr.h>
14
15 struct integrity_iint_cache;
16
17 #ifdef CONFIG_EVM
18 extern int evm_set_key(void *key, size_t keylen);
19 extern enum integrity_status evm_verifyxattr(struct dentry *dentry,
20 const char *xattr_name,
21 void *xattr_value,
22 size_t xattr_value_len,
23 struct integrity_iint_cache *iint);
24 extern int evm_inode_setattr(struct mnt_idmap *idmap,
25 struct dentry *dentry, struct iattr *attr);
26 extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid);
27 extern int evm_inode_setxattr(struct mnt_idmap *idmap,
28 struct dentry *dentry, const char *name,
29 const void *value, size_t size);
30 extern void evm_inode_post_setxattr(struct dentry *dentry,
31 const char *xattr_name,
32 const void *xattr_value,
33 size_t xattr_value_len);
34 extern int evm_inode_removexattr(struct mnt_idmap *idmap,
35 struct dentry *dentry, const char *xattr_name);
36 extern void evm_inode_post_removexattr(struct dentry *dentry,
37 const char *xattr_name);
evm_inode_post_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)38 static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap,
39 struct dentry *dentry,
40 const char *acl_name)
41 {
42 evm_inode_post_removexattr(dentry, acl_name);
43 }
44 extern int evm_inode_set_acl(struct mnt_idmap *idmap,
45 struct dentry *dentry, const char *acl_name,
46 struct posix_acl *kacl);
evm_inode_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)47 static inline int evm_inode_remove_acl(struct mnt_idmap *idmap,
48 struct dentry *dentry,
49 const char *acl_name)
50 {
51 return evm_inode_set_acl(idmap, dentry, acl_name, NULL);
52 }
evm_inode_post_set_acl(struct dentry * dentry,const char * acl_name,struct posix_acl * kacl)53 static inline void evm_inode_post_set_acl(struct dentry *dentry,
54 const char *acl_name,
55 struct posix_acl *kacl)
56 {
57 return evm_inode_post_setxattr(dentry, acl_name, NULL, 0);
58 }
59
60 int evm_inode_init_security(struct inode *inode, struct inode *dir,
61 const struct qstr *qstr, struct xattr *xattrs,
62 int *xattr_count);
63 extern bool evm_revalidate_status(const char *xattr_name);
64 extern int evm_protected_xattr_if_enabled(const char *req_xattr_name);
65 extern int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
66 int buffer_size, char type,
67 bool canonical_fmt);
68 #ifdef CONFIG_FS_POSIX_ACL
69 extern int posix_xattr_acl(const char *xattrname);
70 #else
posix_xattr_acl(const char * xattrname)71 static inline int posix_xattr_acl(const char *xattrname)
72 {
73 return 0;
74 }
75 #endif
76 #else
77
evm_set_key(void * key,size_t keylen)78 static inline int evm_set_key(void *key, size_t keylen)
79 {
80 return -EOPNOTSUPP;
81 }
82
83 #ifdef CONFIG_INTEGRITY
evm_verifyxattr(struct dentry * dentry,const char * xattr_name,void * xattr_value,size_t xattr_value_len,struct integrity_iint_cache * iint)84 static inline enum integrity_status evm_verifyxattr(struct dentry *dentry,
85 const char *xattr_name,
86 void *xattr_value,
87 size_t xattr_value_len,
88 struct integrity_iint_cache *iint)
89 {
90 return INTEGRITY_UNKNOWN;
91 }
92 #endif
93
evm_inode_setattr(struct mnt_idmap * idmap,struct dentry * dentry,struct iattr * attr)94 static inline int evm_inode_setattr(struct mnt_idmap *idmap,
95 struct dentry *dentry, struct iattr *attr)
96 {
97 return 0;
98 }
99
evm_inode_post_setattr(struct dentry * dentry,int ia_valid)100 static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)
101 {
102 return;
103 }
104
evm_inode_setxattr(struct mnt_idmap * idmap,struct dentry * dentry,const char * name,const void * value,size_t size)105 static inline int evm_inode_setxattr(struct mnt_idmap *idmap,
106 struct dentry *dentry, const char *name,
107 const void *value, size_t size)
108 {
109 return 0;
110 }
111
evm_inode_post_setxattr(struct dentry * dentry,const char * xattr_name,const void * xattr_value,size_t xattr_value_len)112 static inline void evm_inode_post_setxattr(struct dentry *dentry,
113 const char *xattr_name,
114 const void *xattr_value,
115 size_t xattr_value_len)
116 {
117 return;
118 }
119
evm_inode_removexattr(struct mnt_idmap * idmap,struct dentry * dentry,const char * xattr_name)120 static inline int evm_inode_removexattr(struct mnt_idmap *idmap,
121 struct dentry *dentry,
122 const char *xattr_name)
123 {
124 return 0;
125 }
126
evm_inode_post_removexattr(struct dentry * dentry,const char * xattr_name)127 static inline void evm_inode_post_removexattr(struct dentry *dentry,
128 const char *xattr_name)
129 {
130 return;
131 }
132
evm_inode_post_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)133 static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap,
134 struct dentry *dentry,
135 const char *acl_name)
136 {
137 return;
138 }
139
evm_inode_set_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name,struct posix_acl * kacl)140 static inline int evm_inode_set_acl(struct mnt_idmap *idmap,
141 struct dentry *dentry, const char *acl_name,
142 struct posix_acl *kacl)
143 {
144 return 0;
145 }
146
evm_inode_remove_acl(struct mnt_idmap * idmap,struct dentry * dentry,const char * acl_name)147 static inline int evm_inode_remove_acl(struct mnt_idmap *idmap,
148 struct dentry *dentry,
149 const char *acl_name)
150 {
151 return 0;
152 }
153
evm_inode_post_set_acl(struct dentry * dentry,const char * acl_name,struct posix_acl * kacl)154 static inline void evm_inode_post_set_acl(struct dentry *dentry,
155 const char *acl_name,
156 struct posix_acl *kacl)
157 {
158 return;
159 }
160
evm_inode_init_security(struct inode * inode,struct inode * dir,const struct qstr * qstr,struct xattr * xattrs,int * xattr_count)161 static inline int evm_inode_init_security(struct inode *inode, struct inode *dir,
162 const struct qstr *qstr,
163 struct xattr *xattrs,
164 int *xattr_count)
165 {
166 return 0;
167 }
168
evm_revalidate_status(const char * xattr_name)169 static inline bool evm_revalidate_status(const char *xattr_name)
170 {
171 return false;
172 }
173
evm_protected_xattr_if_enabled(const char * req_xattr_name)174 static inline int evm_protected_xattr_if_enabled(const char *req_xattr_name)
175 {
176 return false;
177 }
178
evm_read_protected_xattrs(struct dentry * dentry,u8 * buffer,int buffer_size,char type,bool canonical_fmt)179 static inline int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
180 int buffer_size, char type,
181 bool canonical_fmt)
182 {
183 return -EOPNOTSUPP;
184 }
185
186 #endif /* CONFIG_EVM */
187 #endif /* LINUX_EVM_H */
188