Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 1 | /* |
| 2 | * evm.h |
| 3 | * |
| 4 | * Copyright (c) 2009 IBM Corporation |
| 5 | * Author: Mimi Zohar <zohar@us.ibm.com> |
| 6 | */ |
| 7 | |
| 8 | #ifndef _LINUX_EVM_H |
| 9 | #define _LINUX_EVM_H |
| 10 | |
| 11 | #include <linux/integrity.h> |
Mimi Zohar | cb723180 | 2011-03-09 14:40:44 -0500 | [diff] [blame] | 12 | #include <linux/xattr.h> |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 13 | |
Dmitry Kasatkin | 2960e6c | 2011-05-06 11:34:13 +0300 | [diff] [blame] | 14 | struct integrity_iint_cache; |
| 15 | |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 16 | #ifdef CONFIG_EVM |
| 17 | extern enum integrity_status evm_verifyxattr(struct dentry *dentry, |
| 18 | const char *xattr_name, |
| 19 | void *xattr_value, |
Dmitry Kasatkin | 2960e6c | 2011-05-06 11:34:13 +0300 | [diff] [blame] | 20 | size_t xattr_value_len, |
| 21 | struct integrity_iint_cache *iint); |
Mimi Zohar | 817b54a | 2011-05-13 12:53:38 -0400 | [diff] [blame] | 22 | extern int evm_inode_setattr(struct dentry *dentry, struct iattr *attr); |
Mimi Zohar | 975d294 | 2011-03-09 14:39:57 -0500 | [diff] [blame] | 23 | extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid); |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 24 | extern int evm_inode_setxattr(struct dentry *dentry, const char *name, |
| 25 | const void *value, size_t size); |
| 26 | extern void evm_inode_post_setxattr(struct dentry *dentry, |
| 27 | const char *xattr_name, |
| 28 | const void *xattr_value, |
| 29 | size_t xattr_value_len); |
| 30 | extern int evm_inode_removexattr(struct dentry *dentry, const char *xattr_name); |
Mimi Zohar | c7b87de | 2011-03-09 14:39:18 -0500 | [diff] [blame] | 31 | extern void evm_inode_post_removexattr(struct dentry *dentry, |
| 32 | const char *xattr_name); |
Mimi Zohar | cb723180 | 2011-03-09 14:40:44 -0500 | [diff] [blame] | 33 | extern int evm_inode_init_security(struct inode *inode, |
| 34 | const struct xattr *xattr_array, |
| 35 | struct xattr *evm); |
Mimi Zohar | bf6d0f5 | 2011-08-18 18:07:44 -0400 | [diff] [blame] | 36 | #ifdef CONFIG_FS_POSIX_ACL |
| 37 | extern int posix_xattr_acl(const char *xattrname); |
| 38 | #else |
| 39 | static inline int posix_xattr_acl(const char *xattrname) |
| 40 | { |
| 41 | return 0; |
| 42 | } |
| 43 | #endif |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 44 | #else |
| 45 | #ifdef CONFIG_INTEGRITY |
| 46 | static inline enum integrity_status evm_verifyxattr(struct dentry *dentry, |
| 47 | const char *xattr_name, |
| 48 | void *xattr_value, |
Dmitry Kasatkin | 2960e6c | 2011-05-06 11:34:13 +0300 | [diff] [blame] | 49 | size_t xattr_value_len, |
| 50 | struct integrity_iint_cache *iint) |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 51 | { |
| 52 | return INTEGRITY_UNKNOWN; |
| 53 | } |
| 54 | #endif |
| 55 | |
Mimi Zohar | e1c9b23 | 2011-08-11 00:22:51 -0400 | [diff] [blame] | 56 | static inline int evm_inode_setattr(struct dentry *dentry, struct iattr *attr) |
Mimi Zohar | 817b54a | 2011-05-13 12:53:38 -0400 | [diff] [blame] | 57 | { |
| 58 | return 0; |
| 59 | } |
| 60 | |
Mimi Zohar | 975d294 | 2011-03-09 14:39:57 -0500 | [diff] [blame] | 61 | static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid) |
| 62 | { |
| 63 | return; |
| 64 | } |
| 65 | |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 66 | static inline int evm_inode_setxattr(struct dentry *dentry, const char *name, |
| 67 | const void *value, size_t size) |
| 68 | { |
| 69 | return 0; |
| 70 | } |
| 71 | |
| 72 | static inline void evm_inode_post_setxattr(struct dentry *dentry, |
| 73 | const char *xattr_name, |
| 74 | const void *xattr_value, |
| 75 | size_t xattr_value_len) |
| 76 | { |
| 77 | return; |
| 78 | } |
| 79 | |
| 80 | static inline int evm_inode_removexattr(struct dentry *dentry, |
| 81 | const char *xattr_name) |
| 82 | { |
| 83 | return 0; |
| 84 | } |
Mimi Zohar | c7b87de | 2011-03-09 14:39:18 -0500 | [diff] [blame] | 85 | |
| 86 | static inline void evm_inode_post_removexattr(struct dentry *dentry, |
| 87 | const char *xattr_name) |
| 88 | { |
| 89 | return; |
| 90 | } |
| 91 | |
Mimi Zohar | cb723180 | 2011-03-09 14:40:44 -0500 | [diff] [blame] | 92 | static inline int evm_inode_init_security(struct inode *inode, |
| 93 | const struct xattr *xattr_array, |
| 94 | struct xattr *evm) |
| 95 | { |
Mimi Zohar | 5a4730b | 2011-08-11 00:22:52 -0400 | [diff] [blame] | 96 | return 0; |
Mimi Zohar | cb723180 | 2011-03-09 14:40:44 -0500 | [diff] [blame] | 97 | } |
| 98 | |
Mimi Zohar | 3e1be52 | 2011-03-09 14:38:26 -0500 | [diff] [blame] | 99 | #endif /* CONFIG_EVM_H */ |
| 100 | #endif /* LINUX_EVM_H */ |