Home
last modified time | relevance | path

Searched full:integrity (Results 1 – 25 of 339) sorted by relevance

12345678910>>...14

/linux/security/integrity/
H A DMakefile3 # Makefile for caching inode integrity data (iint)
6 obj-$(CONFIG_INTEGRITY) += integrity.o
8 integrity-y := iint.o
9 integrity-$(CONFIG_INTEGRITY_AUDIT) += integrity_audit.o
10 integrity-$(CONFIG_INTEGRITY_SIGNATURE) += digsig.o
11 integrity-$(CONFIG_INTEGRITY_ASYMMETRIC_KEYS) += digsig_asymmetric.o
12 integrity-$(CONFIG_INTEGRITY_PLATFORM_KEYRING) += platform_certs/platform_keyring.o
13 integrity-$(CONFIG_INTEGRITY_MACHINE_KEYRING) += platform_certs/machine_keyring.o
14 integrity-$(CONFIG_LOAD_UEFI_KEYS) += platform_certs/efi_parser.o \
17 integrity
[all...]
H A DKconfig3 config INTEGRITY config
4 bool "Integrity subsystem"
8 This option enables the integrity subsystem, which is comprised
9 of a number of different components including the Integrity
17 if INTEGRITY
47 bool "Require all keys on the integrity keyrings be signed"
120 bool "Enables integrity auditing support "
124 In addition to enabling integrity auditing support, this
126 controls the level of integrity auditing messages.
127 0 - basic integrity auditing messages (default)
[all …]
H A Diint.c9 * - initialize the integrity directory in securityfs
13 #include "integrity.h"
32 * integrity_load_keys - load integrity keys hook
50 integrity_dir = securityfs_create_dir("integrity", NULL); in integrity_fs_init()
55 pr_err("Unable to create integrity sysfs dir: %d\n", in integrity_fs_init()
/linux/block/
H A Dbio-integrity.c3 * bio-integrity.c - bio data integrity extensions
9 #include <linux/blk-integrity.h>
50 * memory to disk for non-integrity metadata where nothing else in __bio_integrity_action()
120 * bio_integrity_free - Free bio integrity payload
123 * Description: Free the integrity portion of a bio.
145 * bio_integrity_alloc - Allocate integrity payload and attach it to bio
146 * @bio: bio to attach integrity metadata to
148 * @nr_vecs: Number of integrity metadata scatter-gather elements
150 * Description: This function prepares a bio for attaching integrity
152 * integrity metadata that can be attached.
[all …]
H A Dbio-integrity-auto.c6 * Automatically generate and verify integrity data on PI capable devices if the
8 * data integrity even if the file system (or other user of the block device) is
11 #include <linux/blk-integrity.h>
48 * __bio_integrity_endio - Integrity I/O completion function
52 * integrity is a time-consuming task which must be run in process context.
74 * bio_integrity_prep - Prepare bio for integrity I/O
78 * Allocate the integrity payload. For writes, generate the integrity metadata
81 * This is used for bios that do not have user integrity payloads attached.
95 /* Auto-generate integrity metadata if this is a write */ in bio_integrity_prep()
115 panic("bio: can't create integrity pool\n"); in blk_integrity_auto_init()
H A Dblk-integrity.c3 * blk-integrity.c - Block layer data integrity extensions
9 #include <linux/blk-integrity.h>
21 * blk_rq_count_integrity_sg - Count number of integrity scatterlist elements
23 * @bio: bio with integrity metadata attached
26 * scatterlist corresponding to the integrity metadata in a bio.
200 return &dev_to_disk(dev)->queue->limits.integrity; in dev_to_bi()
241 lim.integrity.flags &= ~flag; in flag_store()
243 lim.integrity.flags |= flag; in flag_store()
340 .name = "integrity",
H A Dblk-mq-dma.c5 #include <linux/blk-integrity.h>
319 * blk_rq_integrity_dma_map_iter_start - map the first integrity DMA segment
326 * Start DMA mapping @req integrity data to @dma_dev. @state and @iter are
345 unsigned len = bio_integrity_bytes(&req->q->limits.integrity, in blk_rq_integrity_dma_map_iter_start()
360 * blk_rq_integrity_dma_map_iter_next - map the next integrity DMA segment for
367 * Iterate to the next integrity mapping after a previous call to
393 * blk_rq_map_integrity_sg - Map integrity metadata into a scatterlist
397 * Description: Map the integrity vectors in request into a
431 * is bigger than number of req's physical integrity segments in blk_rq_map_integrity_sg()
/linux/Documentation/ABI/stable/
H A Dsysfs-class-tpm4 Contact: linux-integrity@vger.kernel.org
12 Contact: linux-integrity@vger.kernel.org
24 Contact: linux-integrity@vger.kernel.org
32 Contact: linux-integrity@vger.kernel.org
49 Contact: linux-integrity@vger.kernel.org
72 Contact: linux-integrity@vger.kernel.org
81 Contact: linux-integrity@vger.kernel.org
89 Contact: linux-integrity@vger.kernel.org
112 Contact: linux-integrity@vger.kernel.org
164 Contact: linux-integrity@vger.kernel.org
[all …]
/linux/security/integrity/ima/
H A DKconfig2 # IBM Integrity Measurement Architecture
5 bool "Integrity Measurement Architecture(IMA)"
18 The Trusted Computing Group(TCG) runtime Integrity
26 an aggregate integrity value over this list inside the
54 that IMA uses to maintain the integrity aggregate of the
92 prompt "Default integrity hash algorithm"
96 list, integrity appraisal and audit log. The compiled default
149 bool "Appraise integrity measurements"
152 This option enables local measurement integrity appraisal.
158 For more information on integrity appraisal refer to:
H A Dima_main.c3 * Integrity Measurement Architecture
500 * On success return 0. On integrity appraisal error, assuming the file
538 * this point. Eliminate this integrity gap by denying the mprotect
599 * On success return 0. On integrity appraisal error, assuming the file
630 * On success return 0. On integrity appraisal error, assuming the file
647 * and appraise the integrity of a file to be executed by script interpreters.
648 * Unlike any of the other LSM hooks where the kernel enforces file integrity,
649 * enforcing file integrity is left up to the discretion of the script
652 * On success return 0. On integrity appraisal error, assuming the file
677 * On success return 0. On integrity appraisal error, assuming the file
[all …]
/linux/Documentation/staging/
H A Dxz.rst13 for executable code. CRC32 is supported for integrity checking.
53 Since the XZ Embedded supports only streams with CRC32 or no integrity
54 check, make sure that you don't use some other integrity check type
62 which will verify the integrity of the uncompressed data anyway.
63 Double checking the integrity would probably be waste of CPU cycles.
65 by the decoder; you can only change the integrity check type (or
/linux/Documentation/admin-guide/device-mapper/
H A Ddm-crypt.rst137 integrity:<bytes>:<type>
139 in per-bio integrity structure. This metadata must by provided
140 by underlying dm-integrity target.
146 integrity for the encrypted device. The additional space is then
150 Optionally set the integrity key size if it differs from the digest size.
169 Use an integrity key of <bytes> size instead of using an integrity key size
/linux/Documentation/translations/zh_CN/block/
H A Ddata-integrity.rst4 :Original: Documentation/block/data-integrity.rst
117 块设备可以在 queue_limits 结构中的 integrity 子结构中设置完整性信息。
135 /sys/block/<bdev>/integrity/write_generate
139 /sys/block/<bdev>/integrity/read_verify
170 integrity bio_vec list 中存储多少页保护数据（类似 bio_alloc）。
/linux/drivers/md/
H A Ddm-io-rewind.c8 #include <linux/blk-integrity.h>
48 * dm_bio_integrity_rewind - Rewind integrity vector
49 * @bio: bio whose integrity vector to update
52 * Description: This function calculates how many integrity bytes the
54 * integrity vector accordingly.
/linux/security/integrity/evm/
H A DKconfig13 integrity attacks.
57 /sys/kernel/security/integrity/evm/evm_xattrs.
68 verify EVM integrity starting from the 'init' process. The
H A Devm.h18 #include "../integrity.h"
39 /* EVM integrity metadata associated with an inode */
/linux/include/linux/
H A Dbio-integrity.h8 BIP_BLOCK_INTEGRITY = 1 << 0, /* block layer owns integrity data */
10 BIP_DISK_NOCHECK = 1 << 2, /* disable disk integrity checking */
26 unsigned short bip_vcnt; /* # of integrity bio_vecs */
27 unsigned short bip_max_vcnt; /* integrity bio_vec slots */
/linux/drivers/scsi/
H A Dsd_dif.c3 * sd_dif.c - SCSI Data Integrity Field
9 #include <linux/blk-integrity.h>
31 struct blk_integrity *bi = &lim->integrity; in sd_dif_config_host()
/linux/Documentation/security/
H A Dsnp-tdx-threat-model.rst26 security technologies that aim to protect the confidentiality and integrity
46 integrity for the VM's guest memory and execution state (vCPU registers),
51 …w.amd.com/system/files/techdocs/sev-snp-strengthening-vm-isolation-with-integrity-protection-and-m…
163 integrity protection. This threat model assumes that those features are
168 1. Preserve the confidentiality and integrity of CoCo guest's private
201 data should also be considered untrusted until its integrity and
226 This allows the host to break the integrity of the code running
233 integrity or freshness of such data.
/linux/tools/testing/selftests/net/
H A Dtcp_mmap.c89 static int integrity; /* -i option: sender and receiver compute sha256 over the data.*/ variable
205 if (integrity) { in child_thread()
233 if (integrity) in child_thread()
249 if (integrity) in child_thread()
268 if (integrity) in child_thread()
280 if (integrity) { in child_thread()
506 integrity = 1; in main()
583 if (integrity) { in main()
603 if (integrity) in main()
607 if (integrity && total == FILE_SZ) { in main()
/linux/tools/testing/selftests/ublk/
H A Dfile_backed.c84 /* Use second backing file for integrity data */ in loop_queue_tgt_rw_io()
90 /* tgt_data = 1 indicates integrity I/O */ in loop_queue_tgt_rw_io()
247 /* Expect a second file for integrity data */
257 /* Ensure both data and integrity data fit in backing files */
262 * to disable bio-integrity-auto checks
H A Dtest_integrity_02.sh26 _create_backfile 1 32M # 256M * (64 integrity bytes / 512 data bytes)
33 # 1M * (64 integrity bytes / 512 data bytes) = 128K
130 _prep_test "loop" "end-to-end integrity"
/linux/security/lockdown/
H A DKconfig34 bool "Integrity"
36 The kernel runs in integrity mode by default. Features that allow
/linux/security/
H A DMakefile30 # Object integrity file lists
31 obj-$(CONFIG_INTEGRITY) += integrity/
/linux/Documentation/security/tpm/
H A Dtpm-security.rst33 secrets and integrity as far as we are able in this environment and to
41 Measurement (PCR) Integrity
132 used to check the integrity of requests and responses and decrypt and
151 protect the integrity. Additionally, we use parameter encryption to
209 that TPM integrity and privacy was preserved across the entire boot

12345678910>>...14