include/linux/evm.h

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2 /*
   3  * evm.h
   4  *
   5  * Copyright (c) 2009 IBM Corporation
   6  * Author: Mimi Zohar <[email protected]>
   7  */
   8
   9 #ifndef _LINUX_EVM_H
  10 #define _LINUX_EVM_H
  11
  12 #include <linux/integrity.h>
  13 #include <linux/xattr.h>
  14
  15 struct integrity_iint_cache;
  16
  17 #ifdef CONFIG_EVM
  18 extern int evm_set_key(void *key, size_t keylen);
  19 extern enum integrity_status evm_verifyxattr(struct dentry *dentry,
  20                                              const char *xattr_name,
  21                                              void *xattr_value,
  22                                              size_t xattr_value_len,
  23                                              struct integrity_iint_cache *iint);
  24 extern int evm_inode_setattr(struct mnt_idmap *idmap,
  25                              struct dentry *dentry, struct iattr *attr);
  26 extern void evm_inode_post_setattr(struct dentry *dentry, int ia_valid);
  27 extern int evm_inode_setxattr(struct mnt_idmap *idmap,
  28                               struct dentry *dentry, const char *name,
  29                               const void *value, size_t size);
  30 extern void evm_inode_post_setxattr(struct dentry *dentry,
  31                                     const char *xattr_name,
  32                                     const void *xattr_value,
  33                                     size_t xattr_value_len);
  34 extern int evm_inode_copy_up_xattr(const char *name);
  35 extern int evm_inode_removexattr(struct mnt_idmap *idmap,
  36                                  struct dentry *dentry, const char *xattr_name);
  37 extern void evm_inode_post_removexattr(struct dentry *dentry,
  38                                        const char *xattr_name);
  39 static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap,
  40                                              struct dentry *dentry,
  41                                              const char *acl_name)
  42 {
  43         evm_inode_post_removexattr(dentry, acl_name);
  44 }
  45 extern int evm_inode_set_acl(struct mnt_idmap *idmap,
  46                              struct dentry *dentry, const char *acl_name,
  47                              struct posix_acl *kacl);
  48 static inline int evm_inode_remove_acl(struct mnt_idmap *idmap,
  49                                        struct dentry *dentry,
  50                                        const char *acl_name)
  51 {
  52         return evm_inode_set_acl(idmap, dentry, acl_name, NULL);
  53 }
  54 static inline void evm_inode_post_set_acl(struct dentry *dentry,
  55                                           const char *acl_name,
  56                                           struct posix_acl *kacl)
  57 {
  58         return evm_inode_post_setxattr(dentry, acl_name, NULL, 0);
  59 }
  60
  61 int evm_inode_init_security(struct inode *inode, struct inode *dir,
  62                             const struct qstr *qstr, struct xattr *xattrs,
  63                             int *xattr_count);
  64 extern bool evm_revalidate_status(const char *xattr_name);
  65 extern int evm_protected_xattr_if_enabled(const char *req_xattr_name);
  66 extern int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
  67                                      int buffer_size, char type,
  68                                      bool canonical_fmt);
  69 #ifdef CONFIG_FS_POSIX_ACL
  70 extern int posix_xattr_acl(const char *xattrname);
  71 #else
  72 static inline int posix_xattr_acl(const char *xattrname)
  73 {
  74         return 0;
  75 }
  76 #endif
  77 #else
  78
  79 static inline int evm_set_key(void *key, size_t keylen)
  80 {
  81         return -EOPNOTSUPP;
  82 }
  83
  84 #ifdef CONFIG_INTEGRITY
  85 static inline enum integrity_status evm_verifyxattr(struct dentry *dentry,
  86                                                     const char *xattr_name,
  87                                                     void *xattr_value,
  88                                                     size_t xattr_value_len,
  89                                         struct integrity_iint_cache *iint)
  90 {
  91         return INTEGRITY_UNKNOWN;
  92 }
  93 #endif
  94
  95 static inline int evm_inode_setattr(struct mnt_idmap *idmap,
  96                                     struct dentry *dentry, struct iattr *attr)
  97 {
  98         return 0;
  99 }
 100
 101 static inline void evm_inode_post_setattr(struct dentry *dentry, int ia_valid)
 102 {
 103         return;
 104 }
 105
 106 static inline int evm_inode_setxattr(struct mnt_idmap *idmap,
 107                                      struct dentry *dentry, const char *name,
 108                                      const void *value, size_t size)
 109 {
 110         return 0;
 111 }
 112
 113 static inline void evm_inode_post_setxattr(struct dentry *dentry,
 114                                            const char *xattr_name,
 115                                            const void *xattr_value,
 116                                            size_t xattr_value_len)
 117 {
 118         return;
 119 }
 120
 121 static inline int  evm_inode_copy_up_xattr(const char *name)
 122 {
 123         return 0;
 124 }
 125
 126 static inline int evm_inode_removexattr(struct mnt_idmap *idmap,
 127                                         struct dentry *dentry,
 128                                         const char *xattr_name)
 129 {
 130         return 0;
 131 }
 132
 133 static inline void evm_inode_post_removexattr(struct dentry *dentry,
 134                                               const char *xattr_name)
 135 {
 136         return;
 137 }
 138
 139 static inline void evm_inode_post_remove_acl(struct mnt_idmap *idmap,
 140                                              struct dentry *dentry,
 141                                              const char *acl_name)
 142 {
 143         return;
 144 }
 145
 146 static inline int evm_inode_set_acl(struct mnt_idmap *idmap,
 147                                     struct dentry *dentry, const char *acl_name,
 148                                     struct posix_acl *kacl)
 149 {
 150         return 0;
 151 }
 152
 153 static inline int evm_inode_remove_acl(struct mnt_idmap *idmap,
 154                                        struct dentry *dentry,
 155                                        const char *acl_name)
 156 {
 157         return 0;
 158 }
 159
 160 static inline void evm_inode_post_set_acl(struct dentry *dentry,
 161                                           const char *acl_name,
 162                                           struct posix_acl *kacl)
 163 {
 164         return;
 165 }
 166
 167 static inline int evm_inode_init_security(struct inode *inode, struct inode *dir,
 168                                           const struct qstr *qstr,
 169                                           struct xattr *xattrs,
 170                                           int *xattr_count)
 171 {
 172         return 0;
 173 }
 174
 175 static inline bool evm_revalidate_status(const char *xattr_name)
 176 {
 177         return false;
 178 }
 179
 180 static inline int evm_protected_xattr_if_enabled(const char *req_xattr_name)
 181 {
 182         return false;
 183 }
 184
 185 static inline int evm_read_protected_xattrs(struct dentry *dentry, u8 *buffer,
 186                                             int buffer_size, char type,
 187                                             bool canonical_fmt)
 188 {
 189         return -EOPNOTSUPP;
 190 }
 191
 192 #endif /* CONFIG_EVM */
 193 #endif /* LINUX_EVM_H */