1 /* 2 * Copyright (C) 2009-2010 IBM Corporation 3 * 4 * Authors: 5 * Mimi Zohar <zohar@us.ibm.com> 6 * 7 * This program is free software; you can redistribute it and/or 8 * modify it under the terms of the GNU General Public License as 9 * published by the Free Software Foundation, version 2 of the 10 * License. 11 * 12 */ 13 14 #include <linux/types.h> 15 #include <linux/integrity.h> 16 #include <crypto/sha.h> 17 18 /* iint cache flags */ 19 #define IMA_MEASURED 0x01 20 21 enum evm_ima_xattr_type { 22 IMA_XATTR_DIGEST = 0x01, 23 EVM_XATTR_HMAC, 24 EVM_IMA_XATTR_DIGSIG, 25 }; 26 27 struct evm_ima_xattr_data { 28 u8 type; 29 u8 digest[SHA1_DIGEST_SIZE]; 30 } __attribute__((packed)); 31 32 /* integrity data associated with an inode */ 33 struct integrity_iint_cache { 34 struct rb_node rb_node; /* rooted in integrity_iint_tree */ 35 struct inode *inode; /* back pointer to inode in question */ 36 u64 version; /* track inode changes */ 37 unsigned char flags; 38 u8 digest[SHA1_DIGEST_SIZE]; 39 struct mutex mutex; /* protects: version, flags, digest */ 40 enum integrity_status evm_status; 41 }; 42 43 /* rbtree tree calls to lookup, insert, delete 44 * integrity data associated with an inode. 45 */ 46 struct integrity_iint_cache *integrity_iint_insert(struct inode *inode); 47 struct integrity_iint_cache *integrity_iint_find(struct inode *inode); 48 49 /* set during initialization */ 50 extern int iint_initialized; 51