integrity.h (75a323e604fc77c50c7ef2af6f0eeef221637642) integrity.h (4de2f084fbff41113d9adec3c9e15ab12bf05e21)
1/* SPDX-License-Identifier: GPL-2.0-only */
2/*
3 * Copyright (C) 2009-2010 IBM Corporation
4 *
5 * Authors:
6 * Mimi Zohar <zohar@us.ibm.com>
7 */
8

--- 6 unchanged lines hidden (view full) ---

15#include <linux/types.h>
16#include <linux/integrity.h>
17#include <crypto/sha1.h>
18#include <crypto/hash.h>
19#include <linux/key.h>
20#include <linux/audit.h>
21#include <linux/lsm_hooks.h>
22
1/* SPDX-License-Identifier: GPL-2.0-only */
2/*
3 * Copyright (C) 2009-2010 IBM Corporation
4 *
5 * Authors:
6 * Mimi Zohar <zohar@us.ibm.com>
7 */
8

--- 6 unchanged lines hidden (view full) ---

15#include <linux/types.h>
16#include <linux/integrity.h>
17#include <crypto/sha1.h>
18#include <crypto/hash.h>
19#include <linux/key.h>
20#include <linux/audit.h>
21#include <linux/lsm_hooks.h>
22
23/* iint action cache flags */
24#define IMA_MEASURE 0x00000001
25#define IMA_MEASURED 0x00000002
26#define IMA_APPRAISE 0x00000004
27#define IMA_APPRAISED 0x00000008
28/*#define IMA_COLLECT 0x00000010 do not use this flag */
29#define IMA_COLLECTED 0x00000020
30#define IMA_AUDIT 0x00000040
31#define IMA_AUDITED 0x00000080
32#define IMA_HASH 0x00000100
33#define IMA_HASHED 0x00000200
34
35/* iint policy rule cache flags */
36#define IMA_NONACTION_FLAGS 0xff000000
37#define IMA_DIGSIG_REQUIRED 0x01000000
38#define IMA_PERMIT_DIRECTIO 0x02000000
39#define IMA_NEW_FILE 0x04000000
40#define IMA_FAIL_UNVERIFIABLE_SIGS 0x10000000
41#define IMA_MODSIG_ALLOWED 0x20000000
42#define IMA_CHECK_BLACKLIST 0x40000000
43#define IMA_VERITY_REQUIRED 0x80000000
44
45#define IMA_DO_MASK (IMA_MEASURE | IMA_APPRAISE | IMA_AUDIT | \
46 IMA_HASH | IMA_APPRAISE_SUBMASK)
47#define IMA_DONE_MASK (IMA_MEASURED | IMA_APPRAISED | IMA_AUDITED | \
48 IMA_HASHED | IMA_COLLECTED | \
49 IMA_APPRAISED_SUBMASK)
50
51/* iint subaction appraise cache flags */
52#define IMA_FILE_APPRAISE 0x00001000
53#define IMA_FILE_APPRAISED 0x00002000
54#define IMA_MMAP_APPRAISE 0x00004000
55#define IMA_MMAP_APPRAISED 0x00008000
56#define IMA_BPRM_APPRAISE 0x00010000
57#define IMA_BPRM_APPRAISED 0x00020000
58#define IMA_READ_APPRAISE 0x00040000
59#define IMA_READ_APPRAISED 0x00080000
60#define IMA_CREDS_APPRAISE 0x00100000
61#define IMA_CREDS_APPRAISED 0x00200000
62#define IMA_APPRAISE_SUBMASK (IMA_FILE_APPRAISE | IMA_MMAP_APPRAISE | \
63 IMA_BPRM_APPRAISE | IMA_READ_APPRAISE | \
64 IMA_CREDS_APPRAISE)
65#define IMA_APPRAISED_SUBMASK (IMA_FILE_APPRAISED | IMA_MMAP_APPRAISED | \
66 IMA_BPRM_APPRAISED | IMA_READ_APPRAISED | \
67 IMA_CREDS_APPRAISED)
68
69/* iint cache atomic_flags */
70#define IMA_CHANGE_XATTR 0
71#define IMA_UPDATE_XATTR 1
72#define IMA_CHANGE_ATTR 2
73#define IMA_DIGSIG 3
74#define IMA_MUST_MEASURE 4
75
76enum evm_ima_xattr_type {
77 IMA_XATTR_DIGEST = 0x01,
78 EVM_XATTR_HMAC,
79 EVM_IMA_XATTR_DIGSIG,
80 IMA_XATTR_DIGEST_NG,
81 EVM_XATTR_PORTABLE_DIGSIG,
82 IMA_VERITY_DIGSIG,
83 IMA_XATTR_LAST

--- 253 unchanged lines hidden --- 		23enum evm_ima_xattr_type {
24 IMA_XATTR_DIGEST = 0x01,
25 EVM_XATTR_HMAC,
26 EVM_IMA_XATTR_DIGSIG,
27 IMA_XATTR_DIGEST_NG,
28 EVM_XATTR_PORTABLE_DIGSIG,
29 IMA_VERITY_DIGSIG,
30 IMA_XATTR_LAST

--- 253 unchanged lines hidden ---