1 /* SPDX-License-Identifier: GPL-2.0-only */
2 /*
3  * Copyright (C) 2009 IBM Corporation
4  * Author: Mimi Zohar <zohar@us.ibm.com>
5  */
6 
7 #ifndef _LINUX_INTEGRITY_H
8 #define _LINUX_INTEGRITY_H
9 
10 #include <linux/fs.h>
11 #include <linux/iversion.h>
12 
13 enum integrity_status {
14 	INTEGRITY_PASS = 0,
15 	INTEGRITY_PASS_IMMUTABLE,
16 	INTEGRITY_FAIL,
17 	INTEGRITY_FAIL_IMMUTABLE,
18 	INTEGRITY_NOLABEL,
19 	INTEGRITY_NOXATTRS,
20 	INTEGRITY_UNKNOWN,
21 };
22 
23 #ifdef CONFIG_INTEGRITY
24 extern void __init integrity_load_keys(void);
25 
26 #else
integrity_load_keys(void)27 static inline void integrity_load_keys(void)
28 {
29 }
30 #endif /* CONFIG_INTEGRITY */
31 
32 /* An inode's attributes for detection of changes */
33 struct integrity_inode_attributes {
34 	u64 version;		/* track inode changes */
35 	unsigned long ino;
36 	dev_t dev;
37 };
38 
39 /*
40  * On stacked filesystems the i_version alone is not enough to detect file data
41  * or metadata change. Additional metadata is required.
42  */
43 static inline void
integrity_inode_attrs_store(struct integrity_inode_attributes * attrs,u64 i_version,const struct inode * inode)44 integrity_inode_attrs_store(struct integrity_inode_attributes *attrs,
45 			    u64 i_version, const struct inode *inode)
46 {
47 	attrs->version = i_version;
48 	attrs->dev = inode->i_sb->s_dev;
49 	attrs->ino = inode->i_ino;
50 }
51 
52 /*
53  * On stacked filesystems detect whether the inode or its content has changed.
54  */
55 static inline bool
integrity_inode_attrs_changed(const struct integrity_inode_attributes * attrs,const struct inode * inode)56 integrity_inode_attrs_changed(const struct integrity_inode_attributes *attrs,
57 			      const struct inode *inode)
58 {
59 	return (inode->i_sb->s_dev != attrs->dev ||
60 		inode->i_ino != attrs->ino ||
61 		!inode_eq_iversion(inode, attrs->version));
62 }
63 
64 
65 #endif /* _LINUX_INTEGRITY_H */
66