2 * Copyright (C) 2011 Intel Corporation
5 * Dmitry Kasatkin <dmitry.kasatkin@intel.com>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation, version 2 of the License.
13 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
15 #include <linux/err.h>
16 #include <linux/sched.h>
17 #include <linux/slab.h>
18 #include <linux/cred.h>
19 #include <linux/key-type.h>
20 #include <linux/digsig.h>
22 #include "integrity.h"
24 static struct key
*keyring
[INTEGRITY_KEYRING_MAX
];
26 static const char *keyring_name
[INTEGRITY_KEYRING_MAX
] = {
27 #ifndef CONFIG_INTEGRITY_TRUSTED_KEYRING
37 #ifdef CONFIG_INTEGRITY_TRUSTED_KEYRING
38 static bool init_keyring __initdata
= true;
40 static bool init_keyring __initdata
;
43 int integrity_digsig_verify(const unsigned int id
, const char *sig
, int siglen
,
44 const char *digest
, int digestlen
)
46 if (id
>= INTEGRITY_KEYRING_MAX
)
51 request_key(&key_type_keyring
, keyring_name
[id
], NULL
);
52 if (IS_ERR(keyring
[id
])) {
53 int err
= PTR_ERR(keyring
[id
]);
54 pr_err("no %s keyring: %d\n", keyring_name
[id
], err
);
62 /* v1 API expect signature without xattr type */
63 return digsig_verify(keyring
[id
], sig
+ 1, siglen
- 1,
66 return asymmetric_verify(keyring
[id
], sig
, siglen
,
73 int __init
integrity_init_keyring(const unsigned int id
)
75 const struct cred
*cred
= current_cred();
81 keyring
[id
] = keyring_alloc(keyring_name
[id
], KUIDT_INIT(0),
83 ((KEY_POS_ALL
& ~KEY_POS_SETATTR
) |
84 KEY_USR_VIEW
| KEY_USR_READ
|
85 KEY_USR_WRITE
| KEY_USR_SEARCH
),
86 KEY_ALLOC_NOT_IN_QUOTA
, NULL
);
87 if (!IS_ERR(keyring
[id
]))
88 set_bit(KEY_FLAG_TRUSTED_ONLY
, &keyring
[id
]->flags
);
90 err
= PTR_ERR(keyring
[id
]);
91 pr_info("Can't allocate %s keyring (%d)\n",
92 keyring_name
[id
], err
);
98 int __init
integrity_load_x509(const unsigned int id
, const char *path
)
107 rc
= integrity_read_file(path
, &data
);
111 key
= key_create_or_update(make_key_ref(keyring
[id
], 1),
116 ((KEY_POS_ALL
& ~KEY_POS_SETATTR
) |
117 KEY_USR_VIEW
| KEY_USR_READ
),
118 KEY_ALLOC_NOT_IN_QUOTA
);
121 pr_err("Problem loading X.509 certificate (%d): %s\n",
124 pr_notice("Loaded X.509 cert '%s': %s\n",
125 key_ref_to_ptr(key
)->description
, path
);
This page took 0.03365 seconds and 5 git commands to generate.