Home
last modified time | relevance | path

Searched refs:xattrs (Results 1 – 23 of 23) sorted by relevance

/linux/security/integrity/evm/
H A DKconfig32 bool "Additional SMACK xattrs"
36 Include additional SMACK xattrs for HMAC calculation.
38 In addition to the original security xattrs (eg. security.selinux,
41 Smack xattrs: security.SMACK64EXEC, security.SMACK64TRANSMUTE and
53 Allow userland to provide additional xattrs for HMAC calculation.
55 When this option is enabled, root can add additional xattrs to the
H A Devm_main.c97 int i, xattrs; in evm_init_config()
99 xattrs = ARRAY_SIZE(evm_config_default_xattrnames); in evm_init_config()
102 for (i = 0; i < xattrs; i++) { in evm_init_config()
126 * attrs/xattrs being found invalid will not make them valid. in evm_hmac_disabled()
362 * @dentry: dentry of the read xattrs in evm_read_protected_xattrs()
575 * Writing other xattrs is safe for portable signatures, as portable
616 /* Policy permits modification of the protected xattrs even though
645 /* Policy permits modification of the protected xattrs even though in evm_inode_set_acl_change()
701 /* Policy permits modification of the protected xattrs even though in evm_inode_set_acl()
718 * Writing other xattrs i
89 int i, xattrs; evm_init_config() local
1014 evm_inode_init_security(struct inode * inode,struct inode * dir,const struct qstr * qstr,struct xattr * xattrs,int * xattr_count) evm_inode_init_security() argument
[all...]
H A Devm.h62 /* List of EVM protected security xattrs */
85 int evm_init_hmac(struct inode *inode, const struct xattr *xattrs,
H A Devm_crypto.c221 * Calculate the HMAC value across the set of protected security xattrs. in evm_calc_hmac_or_hash()
262 * Skip non-enabled xattrs for locally calculated in evm_calc_hmac_or_hash()
406 int evm_init_hmac(struct inode *inode, const struct xattr *xattrs, in evm_init_hmac()
421 for (xattr = xattrs; xattr->name; xattr++) { in evm_init_hmac()
399 evm_init_hmac(struct inode * inode,const struct xattr * xattrs,char * hmac_val) evm_init_hmac() argument
/linux/Documentation/translations/zh_CN/security/
H A Dipe.rst25 控制机制，因此扩展属性（xattrs）也必须受到保护。这就引出了
49 那么攻击者就可以清除所有的扩展属性（xattrs）——包括
52 使用DM-Verity，由于xattrs被保存为Merkel树的一部分，
/linux/fs/smb/client/
H A Dreparse.c624 struct wsl_xattr xattrs[] = { in wsl_set_xattrs() local
639 num_xattrs = ARRAY_SIZE(xattrs) - 1; in wsl_set_xattrs()
641 num_xattrs = ARRAY_SIZE(xattrs); in wsl_set_xattrs()
644 xattrs[i].next = ALIGN(sizeof(*ea) + name_size + in wsl_set_xattrs()
645 xattrs[i].size, 4); in wsl_set_xattrs()
646 dlen += xattrs[i].next; in wsl_set_xattrs()
656 next = xattrs[i].next; in wsl_set_xattrs()
660 ea->ea_value_length = cpu_to_le16(xattrs[i].size); in wsl_set_xattrs()
661 memcpy(ea->ea_data, xattrs[i].name, name_size); in wsl_set_xattrs()
663 &xattrs[i].value, xattrs[i].size); in wsl_set_xattrs()
/linux/fs/
H A Dpidfs.c102 struct list_head xattrs; member
202 simple_xattrs_free(&pidfs_xa_cache, &attr->xattrs, NULL); in pidfs_free_attr_work()
230 if (likely(list_empty(&attr->xattrs))) in pidfs_free_pid()
844 return simple_xattr_list(inode, &pid->attr->xattrs, buf, size); in pidfs_listxattr()
1058 INIT_LIST_HEAD_RCU(&new_attr->xattrs); in pidfs_register_pid_gfp()
1101 return simple_xattr_get(&pidfs_xa_cache, &pid->attr->xattrs, name, value, size); in pidfs_xattr_get()
1116 old_xattr = simple_xattr_set(&pidfs_xa_cache, &pid->attr->xattrs, name, value, size, flags); in pidfs_xattr_set()
/linux/Documentation/filesystems/
H A Derofs.rst198 | ... | inode | xattrs | extents | data inline | ... | inode ...
208 | xattr_ibody_header | shared xattrs | inline xattrs |
244 The size of the optional xattrs is indicated by i_xattr_count in inode
245 header. Large xattrs or xattrs shared by many different files can be
246 stored in shared xattrs metadata rather than inlined right after inode.
248 2. Shared xattrs metadata space
250 Shared xattrs space is similar to the above inode space, started with
306 only a few common prefixes (such as overlayfs xattrs). The predefined prefixes
H A Doverlayfs.rst416 appropriate REDIRECT and METACOPY xattrs, and gain access to file on lower
418 "trusted." xattrs will require CAP_SYS_ADMIN. But it should be possible
505 When a layer containing verity xattrs is used, it means that any such
588 that have overlayfs attributes, such as whiteouts or "overlay.*" xattrs, will
592 Overlayfs specific xattrs are escaped by using a special prefix of
792 filesystem that supports xattrs.
/linux/fs/overlayfs/
H A DMakefile9 copy_up.o export.o params.o xattrs.o
/linux/Documentation/admin-guide/cifs/
H A Dtodo.rst36 (stat, statfs, create, unlink, mkdir, xattrs) already have been improved by
49 h) implement support for security and trusted categories of xattrs
H A Dusage.rst160 Note that server ea support is required for supporting xattrs from the Linux
539 Allow getting and setting user xattrs (those attributes whose
544 Do not allow getfattr/setfattr to get/set/list xattrs
/linux/fs/ubifs/
H A DKconfig70 Saying Y here includes support for extended attributes (xattrs).
/linux/security/apparmor/include/
H A Dpolicy.h218 char **xattrs; member
/linux/net/
H A Dsocket.c316 struct list_head xattrs; member
333 INIT_LIST_HEAD_RCU(&si->xattrs); in sock_alloc_inode()
353 simple_xattrs_free(&sockfs_xa_cache, &si->xattrs, NULL); in sock_evict_inode()
446 return simple_xattr_get(&sockfs_xa_cache, &si->xattrs, name, value, size); in sockfs_user_xattr_get()
458 return simple_xattr_set_limited(&sockfs_xa_cache, &si->xattrs, &si->xattr_limits, in sockfs_user_xattr_set()
490 return simple_xattr_get(&sockfs_xa_cache, &si->xattrs, name, value, size); in sock_read_xattr()
652 len = simple_xattr_list(d_inode(dentry), &si->xattrs, buffer, size); in sockfs_listxattr()
/linux/Documentation/filesystems/ext4/
H A Dattributes.rst6 Extended attributes (xattrs) are typically stored in a separate data
/linux/security/apparmor/
H A Dpolicy_unpack.c601 profile->attach.xattrs = kcalloc(size, sizeof(char *), GFP_KERNEL); in unpack_xattrs()
602 if (!profile->attach.xattrs) in unpack_xattrs()
605 if (!aa_unpack_strdup(e, &profile->attach.xattrs[i], NULL)) in unpack_xattrs()
H A Dpolicy.c283 kfree_sensitive(attach->xattrs[i]); in free_attachment()
284 kfree_sensitive(attach->xattrs); in free_attachment()
H A Ddomain.c334 size = vfs_getxattr_alloc(&nop_mnt_idmap, d, attach->xattrs[i], in aa_xattrs_match()
/linux/security/smack/
H A Dsmack_lsm.c57 * Smack uses multiple xattrs.
993 xattr_dupval(struct xattr *xattrs, int *xattr_count, in xattr_dupval()
996 struct xattr * const xattr = lsm_get_xattr_slot(xattrs, xattr_count); in xattr_dupval()
1015 * @xattrs: where to put the attributes in smack_inode_init_security()
1016 * @xattr_count: current number of LSM-provided xattrs (updated) in smack_inode_init_security()
1022 struct xattr *xattrs, int *xattr_count) in smack_inode_init_security()
1038 /* forced label, no need to save to xattrs */ in smack_inode_init_security()
1069 if (xattr_dupval(xattrs, xattr_count, in smack_inode_init_security()
1079 if (xattr_dupval(xattrs, xattr_count, in smack_inode_init_security()
1315 * Returns 1 to indicate that Smack "owns" the access control rights to xattrs in smack_inode_xattr_skipcap()
984 xattr_dupval(struct xattr * xattrs,int * xattr_count,const char * name,const void * value,unsigned int vallen) xattr_dupval() argument
1013 smack_inode_init_security(struct inode * inode,struct inode * dir,const struct qstr * qstr,struct xattr * xattrs,int * xattr_count) smack_inode_init_security() argument
[all...]
/linux/fs/squashfs/
H A DKconfig146 Saying Y here includes support for extended attributes (xattrs).
/linux/Documentation/admin-guide/LSM/
H A DSmack.rst77 Smack uses extended attributes (xattrs) to store labels on filesystem
/linux/security/selinux/
H A Dhooks.c2967 struct xattr *xattrs, int *xattr_count) in selinux_inode_init_security() argument
2997 xattr = lsm_get_xattr_slot(xattrs, xattr_count); in selinux_inode_init_security()