Something went wrong. Try again.
(I'm so sorry!) Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899/* SPDX-License-Identifier: GPL-2.0 *//* * Copyright (C) 2020-2024 Microsoft Corporation. All rights reserved. */#ifndef _IPE_POLICY_H#define _IPE_POLICY_H
#include <linux/list.h>#include <linux/types.h>#include <linux/fs.h>
enum ipe_op_type { IPE_OP_EXEC = 0, IPE_OP_FIRMWARE, IPE_OP_KERNEL_MODULE, IPE_OP_KEXEC_IMAGE, IPE_OP_KEXEC_INITRAMFS, IPE_OP_POLICY, IPE_OP_X509, __IPE_OP_MAX,};
#define IPE_OP_INVALID __IPE_OP_MAX
enum ipe_action_type { IPE_ACTION_ALLOW = 0, IPE_ACTION_DENY, __IPE_ACTION_MAX};
#define IPE_ACTION_INVALID __IPE_ACTION_MAX
enum ipe_prop_type { IPE_PROP_BOOT_VERIFIED_FALSE, IPE_PROP_BOOT_VERIFIED_TRUE, IPE_PROP_DMV_ROOTHASH, IPE_PROP_DMV_SIG_FALSE, IPE_PROP_DMV_SIG_TRUE, IPE_PROP_FSV_DIGEST, IPE_PROP_FSV_SIG_FALSE, IPE_PROP_FSV_SIG_TRUE, __IPE_PROP_MAX};
#define IPE_PROP_INVALID __IPE_PROP_MAX
struct ipe_prop { struct list_head next; enum ipe_prop_type type; void *value;};
struct ipe_rule { enum ipe_op_type op; enum ipe_action_type action; struct list_head props; struct list_head next;};
struct ipe_op_table { struct list_head rules; enum ipe_action_type default_action;};
struct ipe_parsed_policy { const char *name; struct { u16 major; u16 minor; u16 rev; } version;
enum ipe_action_type global_default_action;
struct ipe_op_table rules[__IPE_OP_MAX];};
struct ipe_policy { const char *pkcs7; size_t pkcs7len;
const char *text; size_t textlen;
struct ipe_parsed_policy *parsed;
struct dentry *policyfs;};
struct ipe_policy *ipe_new_policy(const char *text, size_t textlen, const char *pkcs7, size_t pkcs7len);void ipe_free_policy(struct ipe_policy *pol);int ipe_update_policy(struct inode *root, const char *text, size_t textlen, const char *pkcs7, size_t pkcs7len);int ipe_set_active_pol(const struct ipe_policy *p);extern struct mutex ipe_policy_lock;
#endif /* _IPE_POLICY_H */