blob: 88bfe77efa1cf10ccdcb5bb50e6e949f05f017bf [file] [log] [blame]
Mimi Zohar66dbc3252011-03-15 16:12:09 -04001/*
2 * Copyright (C) 2005-2010 IBM Corporation
3 *
4 * Authors:
5 * Mimi Zohar <zohar@us.ibm.com>
6 * Kylene Hall <kjhall@us.ibm.com>
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation, version 2 of the License.
11 *
12 * File: evm.h
13 *
14 */
Dmitry Kasatkin15647eb2011-09-01 14:41:40 +030015
16#ifndef __INTEGRITY_EVM_H
17#define __INTEGRITY_EVM_H
18
Mimi Zoharcb723182011-03-09 14:40:44 -050019#include <linux/xattr.h>
Mimi Zohar66dbc3252011-03-15 16:12:09 -040020#include <linux/security.h>
Dmitry Kasatkin15647eb2011-09-01 14:41:40 +030021
Mimi Zohar66dbc3252011-03-15 16:12:09 -040022#include "../integrity.h"
23
24extern int evm_initialized;
25extern char *evm_hmac;
Dmitry Kasatkin15647eb2011-09-01 14:41:40 +030026extern char *evm_hash;
Dmitry Kasatkind3b33672014-03-28 14:31:04 +020027
28#define EVM_ATTR_FSUUID 0x0001
29
30extern int evm_hmac_attrs;
Mimi Zohar66dbc3252011-03-15 16:12:09 -040031
Dmitry Kasatkind46eb362011-03-09 15:07:36 -050032extern struct crypto_shash *hmac_tfm;
Dmitry Kasatkin15647eb2011-09-01 14:41:40 +030033extern struct crypto_shash *hash_tfm;
Dmitry Kasatkind46eb362011-03-09 15:07:36 -050034
Mimi Zohar66dbc3252011-03-15 16:12:09 -040035/* List of EVM protected security xattrs */
36extern char *evm_config_xattrnames[];
37
Dmitry Kasatkin2bb930a2014-03-04 18:04:20 +020038int evm_init_key(void);
39int evm_update_evmxattr(struct dentry *dentry,
40 const char *req_xattr_name,
41 const char *req_xattr_value,
42 size_t req_xattr_value_len);
43int evm_calc_hmac(struct dentry *dentry, const char *req_xattr_name,
44 const char *req_xattr_value,
45 size_t req_xattr_value_len, char *digest);
46int evm_calc_hash(struct dentry *dentry, const char *req_xattr_name,
47 const char *req_xattr_value,
48 size_t req_xattr_value_len, char *digest);
49int evm_init_hmac(struct inode *inode, const struct xattr *xattr,
50 char *hmac_val);
51int evm_init_secfs(void);
Dmitry Kasatkin15647eb2011-09-01 14:41:40 +030052
53#endif