1adf53a77SRoberto Sassu /* 2adf53a77SRoberto Sassu * Copyright (C) 2013 Politecnico di Torino, Italy 3adf53a77SRoberto Sassu * TORSEC group -- http://security.polito.it 4adf53a77SRoberto Sassu * 5adf53a77SRoberto Sassu * Author: Roberto Sassu <roberto.sassu@polito.it> 6adf53a77SRoberto Sassu * 7adf53a77SRoberto Sassu * This program is free software; you can redistribute it and/or 8adf53a77SRoberto Sassu * modify it under the terms of the GNU General Public License as 9adf53a77SRoberto Sassu * published by the Free Software Foundation, version 2 of the 10adf53a77SRoberto Sassu * License. 11adf53a77SRoberto Sassu * 12adf53a77SRoberto Sassu * File: ima_template.c 13adf53a77SRoberto Sassu * Helpers to manage template descriptors. 14adf53a77SRoberto Sassu */ 1520ee451fSJoe Perches 1620ee451fSJoe Perches #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 1720ee451fSJoe Perches 183f23d624SMimi Zohar #include <linux/rculist.h> 19adf53a77SRoberto Sassu #include "ima.h" 203ce1217dSRoberto Sassu #include "ima_template_lib.h" 21adf53a77SRoberto Sassu 2247fdee60SRoberto Sassu enum header_fields { HDR_PCR, HDR_DIGEST, HDR_TEMPLATE_NAME, 2347fdee60SRoberto Sassu HDR_TEMPLATE_DATA, HDR__LAST }; 2447fdee60SRoberto Sassu 253f23d624SMimi Zohar static struct ima_template_desc builtin_templates[] = { 263ce1217dSRoberto Sassu {.name = IMA_TEMPLATE_IMA_NAME, .fmt = IMA_TEMPLATE_IMA_FMT}, 274d7aeee7SRoberto Sassu {.name = "ima-ng", .fmt = "d-ng|n-ng"}, 28bcbc9b0cSMimi Zohar {.name = "ima-sig", .fmt = "d-ng|n-ng|sig"}, 29c2426d2aSRoberto Sassu {.name = "", .fmt = ""}, /* placeholder for a custom format */ 30adf53a77SRoberto Sassu }; 31adf53a77SRoberto Sassu 323f23d624SMimi Zohar static LIST_HEAD(defined_templates); 333f23d624SMimi Zohar static DEFINE_SPINLOCK(template_list); 343f23d624SMimi Zohar 35b2724d58SEric Biggers static const struct ima_template_field supported_fields[] = { 363ce1217dSRoberto Sassu {.field_id = "d", .field_init = ima_eventdigest_init, 373ce1217dSRoberto Sassu .field_show = ima_show_template_digest}, 383ce1217dSRoberto Sassu {.field_id = "n", .field_init = ima_eventname_init, 393ce1217dSRoberto Sassu .field_show = ima_show_template_string}, 404d7aeee7SRoberto Sassu {.field_id = "d-ng", .field_init = ima_eventdigest_ng_init, 414d7aeee7SRoberto Sassu .field_show = ima_show_template_digest_ng}, 424d7aeee7SRoberto Sassu {.field_id = "n-ng", .field_init = ima_eventname_ng_init, 434d7aeee7SRoberto Sassu .field_show = ima_show_template_string}, 44bcbc9b0cSMimi Zohar {.field_id = "sig", .field_init = ima_eventsig_init, 45bcbc9b0cSMimi Zohar .field_show = ima_show_template_sig}, 46adf53a77SRoberto Sassu }; 4794c3aac5SMimi Zohar #define MAX_TEMPLATE_NAME_LEN 15 48adf53a77SRoberto Sassu 49a71dc65dSRoberto Sassu static struct ima_template_desc *ima_template; 509b9d4ce5SRoberto Sassu 519b9d4ce5SRoberto Sassu static int __init ima_template_setup(char *str) 529b9d4ce5SRoberto Sassu { 539b9d4ce5SRoberto Sassu struct ima_template_desc *template_desc; 549b9d4ce5SRoberto Sassu int template_len = strlen(str); 559b9d4ce5SRoberto Sassu 56c2426d2aSRoberto Sassu if (ima_template) 57c2426d2aSRoberto Sassu return 1; 58c2426d2aSRoberto Sassu 593f23d624SMimi Zohar ima_init_template_list(); 603f23d624SMimi Zohar 619b9d4ce5SRoberto Sassu /* 629b9d4ce5SRoberto Sassu * Verify that a template with the supplied name exists. 639b9d4ce5SRoberto Sassu * If not, use CONFIG_IMA_DEFAULT_TEMPLATE. 649b9d4ce5SRoberto Sassu */ 659b9d4ce5SRoberto Sassu template_desc = lookup_template_desc(str); 6671fed2eeSRoberto Sassu if (!template_desc) { 6771fed2eeSRoberto Sassu pr_err("template %s not found, using %s\n", 6871fed2eeSRoberto Sassu str, CONFIG_IMA_DEFAULT_TEMPLATE); 699b9d4ce5SRoberto Sassu return 1; 7071fed2eeSRoberto Sassu } 719b9d4ce5SRoberto Sassu 729b9d4ce5SRoberto Sassu /* 739b9d4ce5SRoberto Sassu * Verify whether the current hash algorithm is supported 749b9d4ce5SRoberto Sassu * by the 'ima' template. 759b9d4ce5SRoberto Sassu */ 769b9d4ce5SRoberto Sassu if (template_len == 3 && strcmp(str, IMA_TEMPLATE_IMA_NAME) == 0 && 779b9d4ce5SRoberto Sassu ima_hash_algo != HASH_ALGO_SHA1 && ima_hash_algo != HASH_ALGO_MD5) { 7820ee451fSJoe Perches pr_err("template does not support hash alg\n"); 799b9d4ce5SRoberto Sassu return 1; 809b9d4ce5SRoberto Sassu } 819b9d4ce5SRoberto Sassu 829b9d4ce5SRoberto Sassu ima_template = template_desc; 839b9d4ce5SRoberto Sassu return 1; 849b9d4ce5SRoberto Sassu } 859b9d4ce5SRoberto Sassu __setup("ima_template=", ima_template_setup); 86a71dc65dSRoberto Sassu 87c2426d2aSRoberto Sassu static int __init ima_template_fmt_setup(char *str) 88c2426d2aSRoberto Sassu { 893f23d624SMimi Zohar int num_templates = ARRAY_SIZE(builtin_templates); 90c2426d2aSRoberto Sassu 91c2426d2aSRoberto Sassu if (ima_template) 92c2426d2aSRoberto Sassu return 1; 93c2426d2aSRoberto Sassu 94c2426d2aSRoberto Sassu if (template_desc_init_fields(str, NULL, NULL) < 0) { 95c2426d2aSRoberto Sassu pr_err("format string '%s' not valid, using template %s\n", 96c2426d2aSRoberto Sassu str, CONFIG_IMA_DEFAULT_TEMPLATE); 97c2426d2aSRoberto Sassu return 1; 98c2426d2aSRoberto Sassu } 99c2426d2aSRoberto Sassu 1003f23d624SMimi Zohar builtin_templates[num_templates - 1].fmt = str; 1013f23d624SMimi Zohar ima_template = builtin_templates + num_templates - 1; 1023f23d624SMimi Zohar 103c2426d2aSRoberto Sassu return 1; 104c2426d2aSRoberto Sassu } 105c2426d2aSRoberto Sassu __setup("ima_template_fmt=", ima_template_fmt_setup); 106c2426d2aSRoberto Sassu 10719453ce0SMatthew Garrett struct ima_template_desc *lookup_template_desc(const char *name) 108a71dc65dSRoberto Sassu { 1093f23d624SMimi Zohar struct ima_template_desc *template_desc; 1103f23d624SMimi Zohar int found = 0; 111a71dc65dSRoberto Sassu 1123f23d624SMimi Zohar rcu_read_lock(); 1133f23d624SMimi Zohar list_for_each_entry_rcu(template_desc, &defined_templates, list) { 1143f23d624SMimi Zohar if ((strcmp(template_desc->name, name) == 0) || 1153f23d624SMimi Zohar (strcmp(template_desc->fmt, name) == 0)) { 1163f23d624SMimi Zohar found = 1; 1173f23d624SMimi Zohar break; 118a71dc65dSRoberto Sassu } 1193f23d624SMimi Zohar } 1203f23d624SMimi Zohar rcu_read_unlock(); 1213f23d624SMimi Zohar return found ? template_desc : NULL; 122a71dc65dSRoberto Sassu } 123a71dc65dSRoberto Sassu 124b2724d58SEric Biggers static const struct ima_template_field * 125b2724d58SEric Biggers lookup_template_field(const char *field_id) 126adf53a77SRoberto Sassu { 127adf53a77SRoberto Sassu int i; 128adf53a77SRoberto Sassu 129adf53a77SRoberto Sassu for (i = 0; i < ARRAY_SIZE(supported_fields); i++) 130adf53a77SRoberto Sassu if (strncmp(supported_fields[i].field_id, field_id, 131adf53a77SRoberto Sassu IMA_TEMPLATE_FIELD_ID_MAX_LEN) == 0) 132adf53a77SRoberto Sassu return &supported_fields[i]; 133adf53a77SRoberto Sassu return NULL; 134adf53a77SRoberto Sassu } 135adf53a77SRoberto Sassu 136dbc335d2SRoberto Sassu static int template_fmt_size(const char *template_fmt) 137adf53a77SRoberto Sassu { 138adf53a77SRoberto Sassu char c; 139adf53a77SRoberto Sassu int template_fmt_len = strlen(template_fmt); 140adf53a77SRoberto Sassu int i = 0, j = 0; 141adf53a77SRoberto Sassu 142adf53a77SRoberto Sassu while (i < template_fmt_len) { 143adf53a77SRoberto Sassu c = template_fmt[i]; 144adf53a77SRoberto Sassu if (c == '|') 145adf53a77SRoberto Sassu j++; 146adf53a77SRoberto Sassu i++; 147adf53a77SRoberto Sassu } 148adf53a77SRoberto Sassu 149adf53a77SRoberto Sassu return j + 1; 150adf53a77SRoberto Sassu } 151adf53a77SRoberto Sassu 15219453ce0SMatthew Garrett int template_desc_init_fields(const char *template_fmt, 153b2724d58SEric Biggers const struct ima_template_field ***fields, 154adf53a77SRoberto Sassu int *num_fields) 155adf53a77SRoberto Sassu { 1569f3166b8SRoberto Sassu const char *template_fmt_ptr; 157b2724d58SEric Biggers const struct ima_template_field *found_fields[IMA_TEMPLATE_NUM_FIELDS_MAX]; 158c7d09367SMimi Zohar int template_num_fields; 1591bd7faceSRoberto Sassu int i, len; 160adf53a77SRoberto Sassu 161c7d09367SMimi Zohar if (num_fields && *num_fields > 0) /* already initialized? */ 162c7d09367SMimi Zohar return 0; 163c7d09367SMimi Zohar 164c7d09367SMimi Zohar template_num_fields = template_fmt_size(template_fmt); 165c7d09367SMimi Zohar 16671fed2eeSRoberto Sassu if (template_num_fields > IMA_TEMPLATE_NUM_FIELDS_MAX) { 16771fed2eeSRoberto Sassu pr_err("format string '%s' contains too many fields\n", 16871fed2eeSRoberto Sassu template_fmt); 169adf53a77SRoberto Sassu return -EINVAL; 17071fed2eeSRoberto Sassu } 171adf53a77SRoberto Sassu 1729f3166b8SRoberto Sassu for (i = 0, template_fmt_ptr = template_fmt; i < template_num_fields; 1739f3166b8SRoberto Sassu i++, template_fmt_ptr += len + 1) { 1749f3166b8SRoberto Sassu char tmp_field_id[IMA_TEMPLATE_FIELD_ID_MAX_LEN + 1]; 175adf53a77SRoberto Sassu 1769f3166b8SRoberto Sassu len = strchrnul(template_fmt_ptr, '|') - template_fmt_ptr; 1779f3166b8SRoberto Sassu if (len == 0 || len > IMA_TEMPLATE_FIELD_ID_MAX_LEN) { 1789f3166b8SRoberto Sassu pr_err("Invalid field with length %d\n", len); 1791bd7faceSRoberto Sassu return -EINVAL; 1809f3166b8SRoberto Sassu } 1819f3166b8SRoberto Sassu 1829f3166b8SRoberto Sassu memcpy(tmp_field_id, template_fmt_ptr, len); 1839f3166b8SRoberto Sassu tmp_field_id[len] = '\0'; 1841bd7faceSRoberto Sassu found_fields[i] = lookup_template_field(tmp_field_id); 1851bd7faceSRoberto Sassu if (!found_fields[i]) { 1869f3166b8SRoberto Sassu pr_err("field '%s' not found\n", tmp_field_id); 1871bd7faceSRoberto Sassu return -ENOENT; 188adf53a77SRoberto Sassu } 189adf53a77SRoberto Sassu } 1901bd7faceSRoberto Sassu 191c2426d2aSRoberto Sassu if (fields && num_fields) { 1921bd7faceSRoberto Sassu *fields = kmalloc_array(i, sizeof(*fields), GFP_KERNEL); 1931bd7faceSRoberto Sassu if (*fields == NULL) 1941bd7faceSRoberto Sassu return -ENOMEM; 1951bd7faceSRoberto Sassu 1961bd7faceSRoberto Sassu memcpy(*fields, found_fields, i * sizeof(*fields)); 197adf53a77SRoberto Sassu *num_fields = i; 198c2426d2aSRoberto Sassu } 199c2426d2aSRoberto Sassu 2001bd7faceSRoberto Sassu return 0; 201adf53a77SRoberto Sassu } 202adf53a77SRoberto Sassu 2033f23d624SMimi Zohar void ima_init_template_list(void) 2043f23d624SMimi Zohar { 2053f23d624SMimi Zohar int i; 2063f23d624SMimi Zohar 2073f23d624SMimi Zohar if (!list_empty(&defined_templates)) 2083f23d624SMimi Zohar return; 2093f23d624SMimi Zohar 2103f23d624SMimi Zohar spin_lock(&template_list); 2113f23d624SMimi Zohar for (i = 0; i < ARRAY_SIZE(builtin_templates); i++) { 2123f23d624SMimi Zohar list_add_tail_rcu(&builtin_templates[i].list, 2133f23d624SMimi Zohar &defined_templates); 2143f23d624SMimi Zohar } 2153f23d624SMimi Zohar spin_unlock(&template_list); 2163f23d624SMimi Zohar } 2173f23d624SMimi Zohar 218a71dc65dSRoberto Sassu struct ima_template_desc *ima_template_desc_current(void) 219a71dc65dSRoberto Sassu { 2203f23d624SMimi Zohar if (!ima_template) { 2213f23d624SMimi Zohar ima_init_template_list(); 2224286587dSMimi Zohar ima_template = 2234286587dSMimi Zohar lookup_template_desc(CONFIG_IMA_DEFAULT_TEMPLATE); 2243f23d624SMimi Zohar } 225a71dc65dSRoberto Sassu return ima_template; 226a71dc65dSRoberto Sassu } 227a71dc65dSRoberto Sassu 228e4a9c519SDmitry Kasatkin int __init ima_init_template(void) 229adf53a77SRoberto Sassu { 230b4148db5SDmitry Kasatkin struct ima_template_desc *template = ima_template_desc_current(); 23171fed2eeSRoberto Sassu int result; 232adf53a77SRoberto Sassu 23371fed2eeSRoberto Sassu result = template_desc_init_fields(template->fmt, 234b4148db5SDmitry Kasatkin &(template->fields), 235b4148db5SDmitry Kasatkin &(template->num_fields)); 23671fed2eeSRoberto Sassu if (result < 0) 2377dbdb420SRoberto Sassu pr_err("template %s init failed, result: %d\n", 2387dbdb420SRoberto Sassu (strlen(template->name) ? 2397dbdb420SRoberto Sassu template->name : template->fmt), result); 24071fed2eeSRoberto Sassu 24171fed2eeSRoberto Sassu return result; 242adf53a77SRoberto Sassu } 24394c3aac5SMimi Zohar 244c7d09367SMimi Zohar static struct ima_template_desc *restore_template_fmt(char *template_name) 245c7d09367SMimi Zohar { 246c7d09367SMimi Zohar struct ima_template_desc *template_desc = NULL; 247c7d09367SMimi Zohar int ret; 248c7d09367SMimi Zohar 249c7d09367SMimi Zohar ret = template_desc_init_fields(template_name, NULL, NULL); 250c7d09367SMimi Zohar if (ret < 0) { 251c7d09367SMimi Zohar pr_err("attempting to initialize the template \"%s\" failed\n", 252c7d09367SMimi Zohar template_name); 253c7d09367SMimi Zohar goto out; 254c7d09367SMimi Zohar } 255c7d09367SMimi Zohar 256c7d09367SMimi Zohar template_desc = kzalloc(sizeof(*template_desc), GFP_KERNEL); 257c7d09367SMimi Zohar if (!template_desc) 258c7d09367SMimi Zohar goto out; 259c7d09367SMimi Zohar 260c7d09367SMimi Zohar template_desc->name = ""; 261c7d09367SMimi Zohar template_desc->fmt = kstrdup(template_name, GFP_KERNEL); 262c7d09367SMimi Zohar if (!template_desc->fmt) 263c7d09367SMimi Zohar goto out; 264c7d09367SMimi Zohar 265c7d09367SMimi Zohar spin_lock(&template_list); 266c7d09367SMimi Zohar list_add_tail_rcu(&template_desc->list, &defined_templates); 267c7d09367SMimi Zohar spin_unlock(&template_list); 268c7d09367SMimi Zohar out: 269c7d09367SMimi Zohar return template_desc; 270c7d09367SMimi Zohar } 271c7d09367SMimi Zohar 27294c3aac5SMimi Zohar static int ima_restore_template_data(struct ima_template_desc *template_desc, 27394c3aac5SMimi Zohar void *template_data, 27494c3aac5SMimi Zohar int template_data_size, 27594c3aac5SMimi Zohar struct ima_template_entry **entry) 27694c3aac5SMimi Zohar { 27794c3aac5SMimi Zohar int ret = 0; 27894c3aac5SMimi Zohar int i; 27994c3aac5SMimi Zohar 28094c3aac5SMimi Zohar *entry = kzalloc(sizeof(**entry) + 28194c3aac5SMimi Zohar template_desc->num_fields * sizeof(struct ima_field_data), 28294c3aac5SMimi Zohar GFP_NOFS); 28394c3aac5SMimi Zohar if (!*entry) 28494c3aac5SMimi Zohar return -ENOMEM; 28594c3aac5SMimi Zohar 28628a8dc41SRoberto Sassu ret = ima_parse_buf(template_data, template_data + template_data_size, 28728a8dc41SRoberto Sassu NULL, template_desc->num_fields, 28828a8dc41SRoberto Sassu (*entry)->template_data, NULL, NULL, 28928a8dc41SRoberto Sassu ENFORCE_FIELDS | ENFORCE_BUFEND, "template data"); 29028a8dc41SRoberto Sassu if (ret < 0) { 29128a8dc41SRoberto Sassu kfree(*entry); 29228a8dc41SRoberto Sassu return ret; 29328a8dc41SRoberto Sassu } 29428a8dc41SRoberto Sassu 29594c3aac5SMimi Zohar (*entry)->template_desc = template_desc; 29694c3aac5SMimi Zohar for (i = 0; i < template_desc->num_fields; i++) { 29728a8dc41SRoberto Sassu struct ima_field_data *field_data = &(*entry)->template_data[i]; 29828a8dc41SRoberto Sassu u8 *data = field_data->data; 29994c3aac5SMimi Zohar 30094c3aac5SMimi Zohar (*entry)->template_data[i].data = 30194c3aac5SMimi Zohar kzalloc(field_data->len + 1, GFP_KERNEL); 30294c3aac5SMimi Zohar if (!(*entry)->template_data[i].data) { 30394c3aac5SMimi Zohar ret = -ENOMEM; 30494c3aac5SMimi Zohar break; 30594c3aac5SMimi Zohar } 30628a8dc41SRoberto Sassu memcpy((*entry)->template_data[i].data, data, field_data->len); 30728a8dc41SRoberto Sassu (*entry)->template_data_len += sizeof(field_data->len); 30894c3aac5SMimi Zohar (*entry)->template_data_len += field_data->len; 30994c3aac5SMimi Zohar } 31094c3aac5SMimi Zohar 31194c3aac5SMimi Zohar if (ret < 0) { 31294c3aac5SMimi Zohar ima_free_template_entry(*entry); 31394c3aac5SMimi Zohar *entry = NULL; 31494c3aac5SMimi Zohar } 31594c3aac5SMimi Zohar 31694c3aac5SMimi Zohar return ret; 31794c3aac5SMimi Zohar } 31894c3aac5SMimi Zohar 31994c3aac5SMimi Zohar /* Restore the serialized binary measurement list without extending PCRs. */ 32094c3aac5SMimi Zohar int ima_restore_measurement_list(loff_t size, void *buf) 32194c3aac5SMimi Zohar { 32294c3aac5SMimi Zohar char template_name[MAX_TEMPLATE_NAME_LEN]; 32394c3aac5SMimi Zohar 32494c3aac5SMimi Zohar struct ima_kexec_hdr *khdr = buf; 32547fdee60SRoberto Sassu struct ima_field_data hdr[HDR__LAST] = { 32647fdee60SRoberto Sassu [HDR_PCR] = {.len = sizeof(u32)}, 32747fdee60SRoberto Sassu [HDR_DIGEST] = {.len = TPM_DIGEST_SIZE}, 32847fdee60SRoberto Sassu }; 32994c3aac5SMimi Zohar 33094c3aac5SMimi Zohar void *bufp = buf + sizeof(*khdr); 331d68a6fe9SMimi Zohar void *bufendp; 33294c3aac5SMimi Zohar struct ima_template_entry *entry; 33394c3aac5SMimi Zohar struct ima_template_desc *template_desc; 33447fdee60SRoberto Sassu DECLARE_BITMAP(hdr_mask, HDR__LAST); 33594c3aac5SMimi Zohar unsigned long count = 0; 33694c3aac5SMimi Zohar int ret = 0; 33794c3aac5SMimi Zohar 33894c3aac5SMimi Zohar if (!buf || size < sizeof(*khdr)) 33994c3aac5SMimi Zohar return 0; 34094c3aac5SMimi Zohar 341d68a6fe9SMimi Zohar if (ima_canonical_fmt) { 342d68a6fe9SMimi Zohar khdr->version = le16_to_cpu(khdr->version); 343d68a6fe9SMimi Zohar khdr->count = le64_to_cpu(khdr->count); 344d68a6fe9SMimi Zohar khdr->buffer_size = le64_to_cpu(khdr->buffer_size); 345d68a6fe9SMimi Zohar } 346d68a6fe9SMimi Zohar 34794c3aac5SMimi Zohar if (khdr->version != 1) { 34894c3aac5SMimi Zohar pr_err("attempting to restore a incompatible measurement list"); 34994c3aac5SMimi Zohar return -EINVAL; 35094c3aac5SMimi Zohar } 35194c3aac5SMimi Zohar 35294c3aac5SMimi Zohar if (khdr->count > ULONG_MAX - 1) { 35394c3aac5SMimi Zohar pr_err("attempting to restore too many measurements"); 35494c3aac5SMimi Zohar return -EINVAL; 35594c3aac5SMimi Zohar } 35694c3aac5SMimi Zohar 35747fdee60SRoberto Sassu bitmap_zero(hdr_mask, HDR__LAST); 35847fdee60SRoberto Sassu bitmap_set(hdr_mask, HDR_PCR, 1); 35947fdee60SRoberto Sassu bitmap_set(hdr_mask, HDR_DIGEST, 1); 36047fdee60SRoberto Sassu 36194c3aac5SMimi Zohar /* 36294c3aac5SMimi Zohar * ima kexec buffer prefix: version, buffer size, count 36394c3aac5SMimi Zohar * v1 format: pcr, digest, template-name-len, template-name, 36494c3aac5SMimi Zohar * template-data-size, template-data 36594c3aac5SMimi Zohar */ 366d68a6fe9SMimi Zohar bufendp = buf + khdr->buffer_size; 36794c3aac5SMimi Zohar while ((bufp < bufendp) && (count++ < khdr->count)) { 36847fdee60SRoberto Sassu int enforce_mask = ENFORCE_FIELDS; 36947fdee60SRoberto Sassu 37047fdee60SRoberto Sassu enforce_mask |= (count == khdr->count) ? ENFORCE_BUFEND : 0; 37147fdee60SRoberto Sassu ret = ima_parse_buf(bufp, bufendp, &bufp, HDR__LAST, hdr, NULL, 37247fdee60SRoberto Sassu hdr_mask, enforce_mask, "entry header"); 37347fdee60SRoberto Sassu if (ret < 0) 37494c3aac5SMimi Zohar break; 37594c3aac5SMimi Zohar 37647fdee60SRoberto Sassu if (hdr[HDR_TEMPLATE_NAME].len >= MAX_TEMPLATE_NAME_LEN) { 37772bf83b0SJoe Perches pr_err("attempting to restore a template name that is too long\n"); 37894c3aac5SMimi Zohar ret = -EINVAL; 37994c3aac5SMimi Zohar break; 38094c3aac5SMimi Zohar } 38194c3aac5SMimi Zohar 38294c3aac5SMimi Zohar /* template name is not null terminated */ 38347fdee60SRoberto Sassu memcpy(template_name, hdr[HDR_TEMPLATE_NAME].data, 38447fdee60SRoberto Sassu hdr[HDR_TEMPLATE_NAME].len); 38547fdee60SRoberto Sassu template_name[hdr[HDR_TEMPLATE_NAME].len] = 0; 38694c3aac5SMimi Zohar 38794c3aac5SMimi Zohar if (strcmp(template_name, "ima") == 0) { 38872bf83b0SJoe Perches pr_err("attempting to restore an unsupported template \"%s\" failed\n", 38972bf83b0SJoe Perches template_name); 39094c3aac5SMimi Zohar ret = -EINVAL; 39194c3aac5SMimi Zohar break; 39294c3aac5SMimi Zohar } 39394c3aac5SMimi Zohar 39494c3aac5SMimi Zohar template_desc = lookup_template_desc(template_name); 39594c3aac5SMimi Zohar if (!template_desc) { 396c7d09367SMimi Zohar template_desc = restore_template_fmt(template_name); 397c7d09367SMimi Zohar if (!template_desc) 398c7d09367SMimi Zohar break; 399c7d09367SMimi Zohar } 400c7d09367SMimi Zohar 401c7d09367SMimi Zohar /* 402c7d09367SMimi Zohar * Only the running system's template format is initialized 403c7d09367SMimi Zohar * on boot. As needed, initialize the other template formats. 404c7d09367SMimi Zohar */ 405c7d09367SMimi Zohar ret = template_desc_init_fields(template_desc->fmt, 406c7d09367SMimi Zohar &(template_desc->fields), 407c7d09367SMimi Zohar &(template_desc->num_fields)); 408c7d09367SMimi Zohar if (ret < 0) { 40972bf83b0SJoe Perches pr_err("attempting to restore the template fmt \"%s\" failed\n", 41072bf83b0SJoe Perches template_desc->fmt); 41194c3aac5SMimi Zohar ret = -EINVAL; 41294c3aac5SMimi Zohar break; 41394c3aac5SMimi Zohar } 41494c3aac5SMimi Zohar 41594c3aac5SMimi Zohar ret = ima_restore_template_data(template_desc, 41647fdee60SRoberto Sassu hdr[HDR_TEMPLATE_DATA].data, 41747fdee60SRoberto Sassu hdr[HDR_TEMPLATE_DATA].len, 41894c3aac5SMimi Zohar &entry); 41994c3aac5SMimi Zohar if (ret < 0) 42094c3aac5SMimi Zohar break; 42194c3aac5SMimi Zohar 42247fdee60SRoberto Sassu memcpy(entry->digest, hdr[HDR_DIGEST].data, 42347fdee60SRoberto Sassu hdr[HDR_DIGEST].len); 42447fdee60SRoberto Sassu entry->pcr = !ima_canonical_fmt ? *(hdr[HDR_PCR].data) : 42547fdee60SRoberto Sassu le32_to_cpu(*(hdr[HDR_PCR].data)); 42694c3aac5SMimi Zohar ret = ima_restore_measurement_entry(entry); 42794c3aac5SMimi Zohar if (ret < 0) 42894c3aac5SMimi Zohar break; 42994c3aac5SMimi Zohar 43094c3aac5SMimi Zohar } 43194c3aac5SMimi Zohar return ret; 43294c3aac5SMimi Zohar } 433