/* SPDX-License-Identifier: GPL-2.0 */ /* * Copyright (C) 2020-2024 Microsoft Corporation. All rights reserved. */ #ifndef _IPE_POLICY_H #define _IPE_POLICY_H #include #include #include enum ipe_op_type { IPE_OP_EXEC = 0, IPE_OP_FIRMWARE, IPE_OP_KERNEL_MODULE, IPE_OP_KEXEC_IMAGE, IPE_OP_KEXEC_INITRAMFS, IPE_OP_POLICY, IPE_OP_X509, __IPE_OP_MAX, }; #define IPE_OP_INVALID __IPE_OP_MAX enum ipe_action_type { IPE_ACTION_ALLOW = 0, IPE_ACTION_DENY, __IPE_ACTION_MAX }; #define IPE_ACTION_INVALID __IPE_ACTION_MAX enum ipe_prop_type { IPE_PROP_BOOT_VERIFIED_FALSE, IPE_PROP_BOOT_VERIFIED_TRUE, IPE_PROP_DMV_ROOTHASH, IPE_PROP_DMV_SIG_FALSE, IPE_PROP_DMV_SIG_TRUE, IPE_PROP_FSV_DIGEST, IPE_PROP_FSV_SIG_FALSE, IPE_PROP_FSV_SIG_TRUE, __IPE_PROP_MAX }; #define IPE_PROP_INVALID __IPE_PROP_MAX struct ipe_prop { struct list_head next; enum ipe_prop_type type; void *value; }; struct ipe_rule { enum ipe_op_type op; enum ipe_action_type action; struct list_head props; struct list_head next; }; struct ipe_op_table { struct list_head rules; enum ipe_action_type default_action; }; struct ipe_parsed_policy { const char *name; struct { u16 major; u16 minor; u16 rev; } version; enum ipe_action_type global_default_action; struct ipe_op_table rules[__IPE_OP_MAX]; }; struct ipe_policy { const char *pkcs7; size_t pkcs7len; const char *text; size_t textlen; struct ipe_parsed_policy *parsed; struct dentry *policyfs; }; struct ipe_policy *ipe_new_policy(const char *text, size_t textlen, const char *pkcs7, size_t pkcs7len); void ipe_free_policy(struct ipe_policy *pol); int ipe_update_policy(struct inode *root, const char *text, size_t textlen, const char *pkcs7, size_t pkcs7len); int ipe_set_active_pol(const struct ipe_policy *p); extern struct mutex ipe_policy_lock; #endif /* _IPE_POLICY_H */