1 // SPDX-License-Identifier: GPL-2.0-only
5  * Copyright 2011-2016 Google Inc.
21 #include <linux/dm-verity-loadpin.h>
71 	 * If load pinning is not enforced via a read-only block  in set_sysctl()
85 	if (mnt_sb->s_bdev) {  in report_writable()
86 		pr_info("%pg (%u:%u): %s\n", mnt_sb->s_bdev,  in report_writable()
87 			MAJOR(mnt_sb->s_bdev->bd_dev),  in report_writable()
88 			MINOR(mnt_sb->s_bdev->bd_dev),  in report_writable()
89 			writable ? "writable" : "read-only");  in report_writable()
105 	if (mnt_sb->s_bdev)  in sb_is_writable()
106 		writable = !bdev_read_only(mnt_sb->s_bdev);  in sb_is_writable()
121 			pinned_root = ERR_PTR(-EIO);  in loadpin_sb_free_security()
139 		report_load(origin, file, "pinning-excluded");  in loadpin_check()
146 			report_load(origin, NULL, "old-api-pinning-ignored");  in loadpin_check()
150 		report_load(origin, NULL, "old-api-denied");  in loadpin_check()
151 		return -EPERM;  in loadpin_check()
154 	load_root = file->f_path.mnt->mnt_sb;  in loadpin_check()
177 	    ((load_root != pinned_root) && !dm_verity_loadpin_is_bdev_trusted(load_root->s_bdev))) {  in loadpin_check()
179 			report_load(origin, file, "pinning-ignored");  in loadpin_check()
184 		return -EPERM;  in loadpin_check()
291 		return -EPERM;  in read_trusted_verity_root_digests()
295 		return -EPERM;  in read_trusted_verity_root_digests()
299 		return -EINVAL;  in read_trusted_verity_root_digests()
303 		rc = -ENOMEM;  in read_trusted_verity_root_digests()
307 	rc = kernel_read_file(fd_file(f), 0, (void **)&data, SZ_4K - 1, NULL, READING_POLICY);  in read_trusted_verity_root_digests()
323 				rc = -EPROTO;  in read_trusted_verity_root_digests()
333 			rc = -EPROTO;  in read_trusted_verity_root_digests()
341 			rc = -ENOMEM;  in read_trusted_verity_root_digests()
344 		trd->len = len;  in read_trusted_verity_root_digests()
346 		if (hex2bin(trd->data, d, len)) {  in read_trusted_verity_root_digests()
348 			rc = -EPROTO;  in read_trusted_verity_root_digests()
352 		list_add_tail(&trd->node, &dm_verity_loadpin_trusted_root_digests);  in read_trusted_verity_root_digests()
356 		rc = -EPROTO;  in read_trusted_verity_root_digests()
372 			list_del(&trd->node);  in read_trusted_verity_root_digests()
393 			return -EFAULT;  in dm_verity_ioctl()
398 		return -EINVAL;  in dm_verity_ioctl()
408  * init_loadpin_securityfs - create the securityfs directory for LoadPin
426 	dentry = securityfs_create_file("dm-verity", 0600, loadpin_dir,  in init_loadpin_securityfs()
429 		pr_err("LoadPin: could not create securityfs entry 'dm-verity': %ld\n",  in init_loadpin_securityfs()