integrity/evm/evm_main.c

133 	struct inode *inode = d_backing_inode(dentry);
138 	if (!(inode->i_opflags & IOP_XATTR))
142 		error = __vfs_getxattr(dentry, inode, xattr->name, NULL, 0);
156 	struct inode *inode = d_backing_inode(dentry);
158 	if (inode->i_sb->s_iflags & SB_I_EVM_HMAC_UNSUPPORTED) {
159 		pr_info_once("%s not supported\n", inode->i_sb->s_type->name);
187 	struct inode *inode = d_backing_inode(dentry);
188 	struct evm_iint_cache *iint = evm_iint_inode(inode);
267 			} else if (!IS_RDONLY(inode) &&
268 				   !(inode->i_sb->s_readonly_remount) &&
269 				   !IS_IMMUTABLE(inode) &&
418  * This function requires the caller to lock the inode's i_mutex before it
442 	struct inode *inode = d_backing_inode(dentry);
444 	if (!evm_key_loaded() || !S_ISREG(inode->i_mode) || evm_fixmode)
639 	struct inode *inode = d_backing_inode(dentry);
644 	rc = posix_acl_update_mode(idmap, inode, &mode, &kacl);
645 	if (rc || (inode->i_mode != mode))
731 static void evm_reset_status(struct inode *inode)
735 	iint = evm_iint_inode(inode);
742  * @inode: a file's inode
743  * @metadata_inode: metadata inode
746  * the case reset the evm_status associated with the inode that represents the
749 bool evm_metadata_changed(struct inode *inode, struct inode *metadata_inode)
751 	struct evm_iint_cache *iint = evm_iint_inode(inode);
801  * __vfs_setxattr_noperm().  The caller of which has taken the inode's
888 	struct inode *inode = d_backing_inode(dentry);
891 	if (!i_uid_needs_update(idmap, attr, inode) &&
892 	    !i_gid_needs_update(idmap, attr, inode) &&
893 	    (!(ia_valid & ATTR_MODE) || attr->ia_mode == inode->i_mode))
958  * to lock the inode's i_mutex.
1013 int evm_inode_init_security(struct inode *inode, struct inode *dir,
1053 	rc = evm_init_hmac(inode, xattrs, xattr_data->digest);
1067 static int evm_inode_alloc_security(struct inode *inode)
1069 	struct evm_iint_cache *iint = evm_iint_inode(inode);
1080 	struct inode *inode = file_inode(file);
1081 	struct evm_iint_cache *iint = evm_iint_inode(inode);
1084 	if (!S_ISREG(inode->i_mode) || !(mode & FMODE_WRITE))
1087 	if (iint && atomic_read(&inode->i_writecount) == 1)
1093 	struct inode *inode = d_backing_inode(dentry);
1094 	struct evm_iint_cache *iint = evm_iint_inode(inode);
1096 	if (!S_ISREG(inode->i_mode))