xref: /linux/include/uapi/linux/loadpin.h (revision 4f2c0a4acffbec01079c28f839422e64ddeff004)
1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2 /*
3  * Copyright (c) 2022, Google LLC
4  */
5 
6 #ifndef _UAPI_LINUX_LOOP_LOADPIN_H
7 #define _UAPI_LINUX_LOOP_LOADPIN_H
8 
9 #define LOADPIN_IOC_MAGIC	'L'
10 
11 /**
12  * LOADPIN_IOC_SET_TRUSTED_VERITY_DIGESTS - Set up the root digests of verity devices
13  *                                          that loadpin should trust.
14  *
15  * Takes a file descriptor from which to read the root digests of trusted verity devices. The file
16  * is expected to contain a list of digests in ASCII format, with one line per digest. The ioctl
17  * must be issued on the securityfs attribute 'loadpin/dm-verity' (which can be typically found
18  * under /sys/kernel/security/loadpin/dm-verity).
19  */
20 #define LOADPIN_IOC_SET_TRUSTED_VERITY_DIGESTS _IOW(LOADPIN_IOC_MAGIC, 0x00, unsigned int)
21 
22 #endif /* _UAPI_LINUX_LOOP_LOADPIN_H */
23