1 /* SPDX-License-Identifier: GPL-2.0 */ 2 /* 3 * evm.h 4 * 5 * Copyright (c) 2009 IBM Corporation 6 * Author: Mimi Zohar <zohar@us.ibm.com> 7 */ 8 9 #ifndef _LINUX_EVM_H 10 #define _LINUX_EVM_H 11 12 #include <linux/integrity.h> 13 #include <linux/xattr.h> 14 15 struct integrity_iint_cache; 16 17 #ifdef CONFIG_EVM 18 extern int evm_set_key(void *key, size_t keylen); 19 extern enum integrity_status evm_verifyxattr(struct dentry *dentry, 20 const char *xattr_name, 21 void *xattr_value, 22 size_t xattr_value_len, 23 struct integrity_iint_cache *iint); 24 extern int evm_inode_setattr(struct dentry *dentry, struct iattr *attr); 25 extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid); 26 extern int evm_inode_setxattr(struct dentry *dentry, const char *name, 27 const void *value, size_t size); 28 extern void evm_inode_post_setxattr(struct dentry *dentry, 29 const char *xattr_name, 30 const void *xattr_value, 31 size_t xattr_value_len); 32 extern int evm_inode_removexattr(struct dentry *dentry, const char *xattr_name); 33 extern void evm_inode_post_removexattr(struct dentry *dentry, 34 const char *xattr_name); 35 extern int evm_inode_init_security(struct inode *inode, 36 const struct xattr *xattr_array, 37 struct xattr *evm); 38 #ifdef CONFIG_FS_POSIX_ACL 39 extern int posix_xattr_acl(const char *xattrname); 40 #else 41 static inline int posix_xattr_acl(const char *xattrname) 42 { 43 return 0; 44 } 45 #endif 46 #else 47 48 static inline int evm_set_key(void *key, size_t keylen) 49 { 50 return -EOPNOTSUPP; 51 } 52 53 #ifdef CONFIG_INTEGRITY 54 static inline enum integrity_status evm_verifyxattr(struct dentry *dentry, 55 const char *xattr_name, 56 void *xattr_value, 57 size_t xattr_value_len, 58 struct integrity_iint_cache *iint) 59 { 60 return INTEGRITY_UNKNOWN; 61 } 62 #endif 63 64 static inline int evm_inode_setattr(struct dentry *dentry, struct iattr *attr) 65 { 66 return 0; 67 } 68 69 static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid) 70 { 71 return; 72 } 73 74 static inline int evm_inode_setxattr(struct dentry *dentry, const char *name, 75 const void *value, size_t size) 76 { 77 return 0; 78 } 79 80 static inline void evm_inode_post_setxattr(struct dentry *dentry, 81 const char *xattr_name, 82 const void *xattr_value, 83 size_t xattr_value_len) 84 { 85 return; 86 } 87 88 static inline int evm_inode_removexattr(struct dentry *dentry, 89 const char *xattr_name) 90 { 91 return 0; 92 } 93 94 static inline void evm_inode_post_removexattr(struct dentry *dentry, 95 const char *xattr_name) 96 { 97 return; 98 } 99 100 static inline int evm_inode_init_security(struct inode *inode, 101 const struct xattr *xattr_array, 102 struct xattr *evm) 103 { 104 return 0; 105 } 106 107 #endif /* CONFIG_EVM */ 108 #endif /* LINUX_EVM_H */ 109