security/integrity/digsig.c

42 static struct key *integrity_keyring_from_id(const unsigned int id)
44 	if (id >= INTEGRITY_KEYRING_MAX)
47 	if (!keyring[id]) {
48 		keyring[id] =
49 			request_key(&key_type_keyring, keyring_name[id], NULL);
50 		if (IS_ERR(keyring[id])) {
51 			int err = PTR_ERR(keyring[id]);
52 			pr_err("no %s keyring: %d\n", keyring_name[id], err);
53 			keyring[id] = NULL;
58 	return keyring[id];
61 int integrity_digsig_verify(const unsigned int id, const char *sig, int siglen,
69 	keyring = integrity_keyring_from_id(id);
87 int integrity_modsig_verify(const unsigned int id, const struct modsig *modsig)
91 	keyring = integrity_keyring_from_id(id);
98 static int __init __integrity_init_keyring(const unsigned int id,
105 	keyring[id] = keyring_alloc(keyring_name[id], KUIDT_INIT(0),
108 	if (IS_ERR(keyring[id])) {
109 		err = PTR_ERR(keyring[id]);
111 			keyring_name[id], err);
112 		keyring[id] = NULL;
114 		if (id == INTEGRITY_KEYRING_PLATFORM)
115 			set_platform_trusted_keys(keyring[id]);
116 		if (id == INTEGRITY_KEYRING_MACHINE && imputed_trust_enabled())
117 			set_machine_trusted_keys(keyring[id]);
118 		if (id == INTEGRITY_KEYRING_IMA)
119 			load_module_cert(keyring[id]);
125 int __init integrity_init_keyring(const unsigned int id)
134 	if (id == INTEGRITY_KEYRING_PLATFORM ||
135 	    (id == INTEGRITY_KEYRING_MACHINE &&
148 	if (id == INTEGRITY_KEYRING_MACHINE)
158 	if (id != INTEGRITY_KEYRING_MACHINE)
162 	ret = __integrity_init_keyring(id, perm, restriction);
168 static int __init integrity_add_key(const unsigned int id, const void *data,
174 	if (!keyring[id])
177 	key = key_create_or_update(make_key_ref(keyring[id], 1), "asymmetric",
182 		if (id != INTEGRITY_KEYRING_MACHINE)
194 int __init integrity_load_x509(const unsigned int id, const char *path)
212 	rc = integrity_add_key(id, (const void *)data, size, perm);
218 int __init integrity_load_cert(const unsigned int id, const char *source,
225 	return integrity_add_key(id, data, len, perm);