2 * Copyright (C) 2009-2010 IBM Corporation
5 * Mimi Zohar <zohar@us.ibm.com>
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License as
9 * published by the Free Software Foundation, version 2 of the
14 #include <linux/types.h>
15 #include <linux/integrity.h>
16 #include <crypto/sha.h>
18 /* iint cache flags */
19 #define IMA_MEASURE 0x01
20 #define IMA_MEASURED 0x02
21 #define IMA_APPRAISE 0x04
22 #define IMA_APPRAISED 0x08
23 #define IMA_COLLECTED 0x10
24 #define IMA_DIGSIG 0x20
26 enum evm_ima_xattr_type {
27 IMA_XATTR_DIGEST = 0x01,
32 struct evm_ima_xattr_data {
34 u8 digest[SHA1_DIGEST_SIZE];
35 } __attribute__((packed));
37 /* integrity data associated with an inode */
38 struct integrity_iint_cache {
39 struct rb_node rb_node; /* rooted in integrity_iint_tree */
40 struct inode *inode; /* back pointer to inode in question */
41 u64 version; /* track inode changes */
43 struct evm_ima_xattr_data ima_xattr;
44 enum integrity_status ima_status;
45 enum integrity_status evm_status;
48 /* rbtree tree calls to lookup, insert, delete
49 * integrity data associated with an inode.
51 struct integrity_iint_cache *integrity_iint_insert(struct inode *inode);
52 struct integrity_iint_cache *integrity_iint_find(struct inode *inode);
54 #define INTEGRITY_KEYRING_EVM 0
55 #define INTEGRITY_KEYRING_MODULE 1
56 #define INTEGRITY_KEYRING_IMA 2
57 #define INTEGRITY_KEYRING_MAX 3
59 #ifdef CONFIG_INTEGRITY_SIGNATURE
61 int integrity_digsig_verify(const unsigned int id, const char *sig, int siglen,
62 const char *digest, int digestlen);
66 static inline int integrity_digsig_verify(const unsigned int id,
67 const char *sig, int siglen,
68 const char *digest, int digestlen)
73 #endif /* CONFIG_INTEGRITY_SIGNATURE */
75 /* set during initialization */
76 extern int iint_initialized;