1 /* SPDX-License-Identifier: GPL-2.0 */ 1 /* SPDX-License-Identifier: GPL-2.0 */
2 /* 2 /*
3 * Copyright (C) 2020-2024 Microsoft Corporati 3 * Copyright (C) 2020-2024 Microsoft Corporation. All rights reserved.
4 */ 4 */
5 5
6 #ifndef _IPE_EVAL_H 6 #ifndef _IPE_EVAL_H
7 #define _IPE_EVAL_H 7 #define _IPE_EVAL_H
8 8
9 #include <linux/file.h> 9 #include <linux/file.h>
10 #include <linux/types.h> 10 #include <linux/types.h>
11 11
12 #include "policy.h" 12 #include "policy.h"
13 #include "hooks.h" 13 #include "hooks.h"
14 14
15 #define IPE_EVAL_CTX_INIT ((struct ipe_eval_ct 15 #define IPE_EVAL_CTX_INIT ((struct ipe_eval_ctx){ 0 })
16 16
17 extern struct ipe_policy __rcu *ipe_active_pol 17 extern struct ipe_policy __rcu *ipe_active_policy;
18 extern bool success_audit; 18 extern bool success_audit;
19 extern bool enforce; 19 extern bool enforce;
20 20
21 struct ipe_superblock { 21 struct ipe_superblock {
22 bool initramfs; 22 bool initramfs;
23 }; 23 };
24 24
25 #ifdef CONFIG_IPE_PROP_DM_VERITY 25 #ifdef CONFIG_IPE_PROP_DM_VERITY
26 struct ipe_bdev { 26 struct ipe_bdev {
27 #ifdef CONFIG_IPE_PROP_DM_VERITY_SIGNATURE 27 #ifdef CONFIG_IPE_PROP_DM_VERITY_SIGNATURE
28 bool dm_verity_signed; 28 bool dm_verity_signed;
29 #endif /* CONFIG_IPE_PROP_DM_VERITY_SIGNATURE 29 #endif /* CONFIG_IPE_PROP_DM_VERITY_SIGNATURE */
30 struct digest_info *root_hash; 30 struct digest_info *root_hash;
31 }; 31 };
32 #endif /* CONFIG_IPE_PROP_DM_VERITY */ 32 #endif /* CONFIG_IPE_PROP_DM_VERITY */
33 33
34 #ifdef CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG 34 #ifdef CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG
35 struct ipe_inode { 35 struct ipe_inode {
36 bool fs_verity_signed; 36 bool fs_verity_signed;
37 }; 37 };
38 #endif /* CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SI 38 #endif /* CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG */
39 39
40 struct ipe_eval_ctx { 40 struct ipe_eval_ctx {
41 enum ipe_op_type op; 41 enum ipe_op_type op;
42 enum ipe_hook_type hook; 42 enum ipe_hook_type hook;
43 43
44 const struct file *file; 44 const struct file *file;
45 bool initramfs; 45 bool initramfs;
46 #ifdef CONFIG_IPE_PROP_DM_VERITY 46 #ifdef CONFIG_IPE_PROP_DM_VERITY
47 const struct ipe_bdev *ipe_bdev; 47 const struct ipe_bdev *ipe_bdev;
48 #endif /* CONFIG_IPE_PROP_DM_VERITY */ 48 #endif /* CONFIG_IPE_PROP_DM_VERITY */
49 #ifdef CONFIG_IPE_PROP_FS_VERITY 49 #ifdef CONFIG_IPE_PROP_FS_VERITY
50 const struct inode *ino; 50 const struct inode *ino;
51 #endif /* CONFIG_IPE_PROP_FS_VERITY */ 51 #endif /* CONFIG_IPE_PROP_FS_VERITY */
52 #ifdef CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG 52 #ifdef CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG
53 const struct ipe_inode *ipe_inode; 53 const struct ipe_inode *ipe_inode;
54 #endif /* CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SI 54 #endif /* CONFIG_IPE_PROP_FS_VERITY_BUILTIN_SIG */
55 }; 55 };
56 56
57 enum ipe_match { 57 enum ipe_match {
58 IPE_MATCH_RULE = 0, 58 IPE_MATCH_RULE = 0,
59 IPE_MATCH_TABLE, 59 IPE_MATCH_TABLE,
60 IPE_MATCH_GLOBAL, 60 IPE_MATCH_GLOBAL,
61 __IPE_MATCH_MAX 61 __IPE_MATCH_MAX
62 }; 62 };
63 63
64 void ipe_build_eval_ctx(struct ipe_eval_ctx *c 64 void ipe_build_eval_ctx(struct ipe_eval_ctx *ctx,
65 const struct file *fil 65 const struct file *file,
66 enum ipe_op_type op, 66 enum ipe_op_type op,
67 enum ipe_hook_type hoo 67 enum ipe_hook_type hook);
68 int ipe_evaluate_event(const struct ipe_eval_c 68 int ipe_evaluate_event(const struct ipe_eval_ctx *const ctx);
69 69
70 #endif /* _IPE_EVAL_H */ 70 #endif /* _IPE_EVAL_H */
71 71
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.