vasilito
dc68054305
- Restore 29 recipe symlinks (libdrm, qtbase, dbus, sddm, pipewire, etc.) - Restore 33 patches (KDE, libdrm, mesa, pipewire, sddm, wireplumber) - Restore 20+ local/scripts (audit, lint, test, build helpers) - Restore src/cook/scheduler.rs, status.rs, gnu-config/ - Restore scripts/patch-inclusion-gate.sh, run_mini1.sh, validate-collision-log.sh - Recover TLC source from HEAD (was overwritten by 0.2.3 checkout) - Recover 11 local/docs plans from HEAD (were overwritten) - Recover qt6-wayland-smoke symlink from HEAD - Fix MOTD: remove garbled ASCII art, use clean text - Update version: 0.2.0 -> 0.2.4 in os-release, motd, config - Reduce filesystem_size: 1536 -> 512 MiB - Add ABSOLUTE RULE to AGENTS.md: never delete/ignore packages - Reduce pcid scheme log verbosity: info -> debug
66 lines
1.5 KiB
C
66 lines
1.5 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* Copyright (C) 2009 IBM Corporation
|
|
* Author: Mimi Zohar <zohar@us.ibm.com>
|
|
*/
|
|
|
|
#ifndef _LINUX_INTEGRITY_H
|
|
#define _LINUX_INTEGRITY_H
|
|
|
|
#include <linux/fs.h>
|
|
#include <linux/iversion.h>
|
|
|
|
enum integrity_status {
|
|
INTEGRITY_PASS = 0,
|
|
INTEGRITY_PASS_IMMUTABLE,
|
|
INTEGRITY_FAIL,
|
|
INTEGRITY_FAIL_IMMUTABLE,
|
|
INTEGRITY_NOLABEL,
|
|
INTEGRITY_NOXATTRS,
|
|
INTEGRITY_UNKNOWN,
|
|
};
|
|
|
|
#ifdef CONFIG_INTEGRITY
|
|
extern void __init integrity_load_keys(void);
|
|
|
|
#else
|
|
static inline void integrity_load_keys(void)
|
|
{
|
|
}
|
|
#endif /* CONFIG_INTEGRITY */
|
|
|
|
/* An inode's attributes for detection of changes */
|
|
struct integrity_inode_attributes {
|
|
u64 version; /* track inode changes */
|
|
unsigned long ino;
|
|
dev_t dev;
|
|
};
|
|
|
|
/*
|
|
* On stacked filesystems the i_version alone is not enough to detect file data
|
|
* or metadata change. Additional metadata is required.
|
|
*/
|
|
static inline void
|
|
integrity_inode_attrs_store(struct integrity_inode_attributes *attrs,
|
|
u64 i_version, const struct inode *inode)
|
|
{
|
|
attrs->version = i_version;
|
|
attrs->dev = inode->i_sb->s_dev;
|
|
attrs->ino = inode->i_ino;
|
|
}
|
|
|
|
/*
|
|
* On stacked filesystems detect whether the inode or its content has changed.
|
|
*/
|
|
static inline bool
|
|
integrity_inode_attrs_changed(const struct integrity_inode_attributes *attrs,
|
|
const struct inode *inode)
|
|
{
|
|
return (inode->i_sb->s_dev != attrs->dev ||
|
|
inode->i_ino != attrs->ino ||
|
|
!inode_eq_iversion(inode, attrs->version));
|
|
}
|
|
|
|
|
|
#endif /* _LINUX_INTEGRITY_H */
|