| /linux/security/integrity/ima/ |
| H A D | ima_modsig.c | 18 struct modsig { struct
23 /* This digest will go in the 'd-modsig' field of the IMA template. */ argument
36 * ima_read_modsig - Read modsig from buf. argument
41 struct modsig **modsig) in ima_read_modsig() argument
45 struct modsig *hdr; in ima_read_modsig()
85 *modsig = hdr; in ima_read_modsig()
92 * @modsig: parsed module signature
96 * Since the modsig is part of the file contents, the hash used in its signature
100 void ima_collect_modsig(struct modsig *modsi argument
119 ima_modsig_verify(struct key * keyring,const struct modsig * modsig) ima_modsig_verify() argument
125 ima_get_modsig_digest(const struct modsig * modsig,enum hash_algo * algo,const u8 ** digest,u32 * digest_size) ima_get_modsig_digest() argument
135 ima_get_raw_modsig(const struct modsig * modsig,const void ** data,u32 * data_len) ima_get_raw_modsig() argument
144 ima_free_modsig(struct modsig * modsig) ima_free_modsig() argument
[all...] |
| H A D | ima.h | 89 const struct modsig *modsig;
399 struct modsig;
434 struct modsig *modsig);
438 int xattr_len, const struct modsig *modsig, int pcr,
486 const struct modsig *modsig, int pcr);
490 int xattr_len, const struct modsig *modsi in ima_get_hash_algo()
76 const struct modsig *modsig; global() member
452 ima_check_blacklist(struct ima_iint_cache * iint,const struct modsig * modsig,int pcr) ima_check_blacklist() argument
463 ima_appraise_measurement(enum ima_hooks func,struct ima_iint_cache * iint,struct file * file,const unsigned char * filename,struct evm_ima_xattr_data * xattr_value,int xattr_len,const struct modsig * modsig) ima_appraise_measurement() argument
516 ima_read_modsig(enum ima_hooks func,const void * buf,loff_t buf_len,struct modsig ** modsig) ima_read_modsig() argument
521 ima_collect_modsig(struct modsig * modsig,const void * buf,loff_t size) ima_collect_modsig() argument
526 ima_get_modsig_digest(const struct modsig * modsig,enum hash_algo * algo,const u8 ** digest,u32 * digest_size) ima_get_modsig_digest() argument
533 ima_get_raw_modsig(const struct modsig * modsig,const void ** data,u32 * data_len) ima_get_raw_modsig() argument
539 ima_free_modsig(struct modsig * modsig) ima_free_modsig() argument
[all...] |
| H A D | ima_api.c | 245 struct modsig *modsig) in ima_collect_measurement() argument
261 * Always collect the modsig, because IMA might have already collected in ima_collect_measurement()
262 * the file digest without collecting the modsig in a previous in ima_collect_measurement()
265 if (modsig) in ima_collect_measurement()
266 ima_collect_modsig(modsig, buf, size); in ima_collect_measurement()
358 int xattr_len, const struct modsig *modsig, int pcr, in ima_store_measurement()
371 .modsig = modsig }; in ima_store_measurement()
353 ima_store_measurement(struct ima_iint_cache * iint,struct file * file,const unsigned char * filename,struct evm_ima_xattr_data * xattr_value,int xattr_len,const struct modsig * modsig,int pcr,struct ima_template_desc * template_desc) ima_store_measurement() argument
[all...] |
| H A D | ima_appraise.c | 400 static int modsig_verify(enum ima_hooks func, const struct modsig *modsig, in modsig_verify() argument
405 rc = integrity_modsig_verify(INTEGRITY_KEYRING_IMA, modsig); in modsig_verify()
409 modsig); in modsig_verify()
429 const struct modsig *modsig, int pcr) in ima_check_blacklist() argument
439 if (iint->flags & IMA_MODSIG_ALLOWED && modsig) { in ima_check_blacklist()
440 ima_get_modsig_digest(modsig, &hash_algo, &digest, &digestsize); in ima_check_blacklist()
465 int xattr_len, const struct modsig *modsig, in ima_appraise_measurement() argument
475 bool try_modsig = iint->flags & IMA_MODSIG_ALLOWED && modsig; in ima_appraise_measurement()
552 rc = modsig_verify(func, modsig, &status, &cause); in ima_appraise_measurement()
|
| H A D | ima_main.c | 270 struct modsig *modsig = NULL; in process_measurement() local
415 rc = ima_read_modsig(func, buf, size, &modsig); in process_measurement()
425 rc = ima_collect_measurement(iint, file, buf, size, hash_algo, modsig); in process_measurement()
440 xattr_value, xattr_len, modsig, pcr, in process_measurement()
443 rc = ima_check_blacklist(iint, modsig, pcr); in process_measurement()
448 xattr_len, modsig, in process_measurement()
477 ima_free_modsig(modsig); in process_measurement()
|
| H A D | ima_template_lib.c | 465 if (!event_data->modsig) in ima_eventdigest_modsig_init()
476 rc = ima_get_modsig_digest(event_data->modsig, &hash_algo, in ima_eventdigest_modsig_init()
593 if (!event_data->modsig) in ima_eventmodsig_init()
597 * modsig is a runtime structure containing pointers. Get its raw data in ima_eventmodsig_init()
600 rc = ima_get_raw_modsig(event_data->modsig, &data, &data_len); in ima_eventmodsig_init()
|
| H A D | Kconfig | 243 The modsig keyword can be used in the IMA policy to allow a hook
|
| /linux/security/integrity/ |
| H A D | integrity.h | 129 struct modsig;
135 int integrity_modsig_verify(unsigned int id, const struct modsig *modsig);
152 const struct modsig *modsig) in integrity_modsig_verify()
192 int ima_modsig_verify(struct key *keyring, const struct modsig *modsig);
195 const struct modsig *modsig) in ima_load_x509()
150 integrity_modsig_verify(unsigned int id,const struct modsig * modsig) integrity_modsig_verify() argument
184 ima_modsig_verify(struct key * keyring,const struct modsig * modsig) ima_modsig_verify() argument
|
| H A D | digsig.c | 89 int integrity_modsig_verify(const unsigned int id, const struct modsig *modsig) in integrity_modsig_verify()
97 return ima_modsig_verify(keyring, modsig);
87 integrity_modsig_verify(const unsigned int id,const struct modsig * modsig) integrity_modsig_verify() argument
|
| /linux/Documentation/security/ |
| H A D | IMA-templates.rst | 72 - 'd-modsig': the digest of the event without the appended modsig;
76 - 'modsig' the appended file signature;
96 - "ima-modsig": its format is ``d-ng|n-ng|sig|d-modsig|modsig``;
|