integrity/ima/ima_appraise.c

87 static int ima_fix_xattr(struct dentry *dentry, struct ima_iint_cache *iint)
100 	rc = __vfs_setxattr_noperm(&nop_mnt_idmap, dentry, XATTR_NAME_IMA,
224 int ima_read_xattr(struct dentry *dentry,
229 	ret = vfs_getxattr_alloc(&nop_mnt_idmap, dentry, XATTR_NAME_IMA,
487 	struct dentry *dentry = file_dentry(file);
488 	struct inode *inode = d_backing_inode(dentry);
521 	status = evm_verifyxattr(dentry, XATTR_NAME_IMA, xattr_value,
579 			if (!ima_fix_xattr(dentry, iint))
607 	struct dentry *dentry = file_dentry(file);
623 	ima_fix_xattr(dentry, iint);
630  * @dentry: pointer to the affected dentry
633  * Changes to a dentry's metadata might result in needing to appraise.
639 				   struct dentry *dentry, int ia_valid)
641 	struct inode *inode = d_backing_inode(dentry);
663 static int ima_protect_xattr(struct dentry *dentry, const char *xattr_name,
694  * @dentry: object of the setxattr()
705 static int validate_hash_algo(struct dentry *dentry,
742 	path = dentry_path(dentry, pathbuf, PATH_MAX);
744 	integrity_audit_msg(AUDIT_INTEGRITY_DATA, d_inode(dentry), path,
752 static int ima_inode_setxattr(struct mnt_idmap *idmap, struct dentry *dentry,
761 	result = ima_protect_xattr(dentry, xattr_name, xattr_value,
767 		err = validate_hash_algo(dentry, xvalue, xattr_value_len);
776 		ima_reset_appraise_flags(d_backing_inode(dentry), digsig);
783 static int ima_inode_set_acl(struct mnt_idmap *idmap, struct dentry *dentry,
787 		ima_reset_appraise_flags(d_backing_inode(dentry), 0);
792 static int ima_inode_removexattr(struct mnt_idmap *idmap, struct dentry *dentry,
797 	result = ima_protect_xattr(dentry, xattr_name, NULL, 0);
799 		ima_reset_appraise_flags(d_backing_inode(dentry), 0);
806 static int ima_inode_remove_acl(struct mnt_idmap *idmap, struct dentry *dentry,
809 	return ima_inode_set_acl(idmap, dentry, acl_name, NULL);