1/* 2 * Copyright (C) 2005-2010 IBM Corporation 3 * 4 * Authors: 5 * Mimi Zohar <zohar@us.ibm.com> 6 * Kylene Hall <kjhall@us.ibm.com> 7 * 8 * This program is free software; you can redistribute it and/or modify 9 * it under the terms of the GNU General Public License as published by 10 * the Free Software Foundation, version 2 of the License. 11 * 12 * File: evm.h 13 * 14 */ 15 16#ifndef __INTEGRITY_EVM_H 17#define __INTEGRITY_EVM_H 18 19#include <linux/xattr.h> 20#include <linux/security.h> 21 22#include "../integrity.h" 23 24extern int evm_initialized; 25extern char *evm_hmac; 26extern char *evm_hash; 27 28#define EVM_ATTR_FSUUID 0x0001 29 30extern int evm_hmac_attrs; 31 32extern struct crypto_shash *hmac_tfm; 33extern struct crypto_shash *hash_tfm; 34 35/* List of EVM protected security xattrs */ 36extern char *evm_config_xattrnames[]; 37 38int evm_init_key(void); 39int evm_update_evmxattr(struct dentry *dentry, 40 const char *req_xattr_name, 41 const char *req_xattr_value, 42 size_t req_xattr_value_len); 43int evm_calc_hmac(struct dentry *dentry, const char *req_xattr_name, 44 const char *req_xattr_value, 45 size_t req_xattr_value_len, char *digest); 46int evm_calc_hash(struct dentry *dentry, const char *req_xattr_name, 47 const char *req_xattr_value, 48 size_t req_xattr_value_len, char *digest); 49int evm_init_hmac(struct inode *inode, const struct xattr *xattr, 50 char *hmac_val); 51int evm_init_secfs(void); 52 53#endif 54