Lines Matching refs:iint
116 struct integrity_iint_cache *iint, in ima_rdwr_violation_check() argument
128 if (!iint) in ima_rdwr_violation_check()
129 iint = integrity_iint_find(inode); in ima_rdwr_violation_check()
131 if (iint && test_bit(IMA_MUST_MEASURE, in ima_rdwr_violation_check()
132 &iint->atomic_flags)) in ima_rdwr_violation_check()
137 set_bit(IMA_MUST_MEASURE, &iint->atomic_flags); in ima_rdwr_violation_check()
148 ima_add_violation(file, *pathname, iint, in ima_rdwr_violation_check()
151 ima_add_violation(file, *pathname, iint, in ima_rdwr_violation_check()
155 static void ima_check_last_writer(struct integrity_iint_cache *iint, in ima_check_last_writer() argument
164 mutex_lock(&iint->mutex); in ima_check_last_writer()
167 &iint->atomic_flags); in ima_check_last_writer()
169 !inode_eq_iversion(inode, iint->version) || in ima_check_last_writer()
170 (iint->flags & IMA_NEW_FILE)) { in ima_check_last_writer()
171 iint->flags &= ~(IMA_DONE_MASK | IMA_NEW_FILE); in ima_check_last_writer()
172 iint->measured_pcrs = 0; in ima_check_last_writer()
174 ima_update_xattr(iint, file); in ima_check_last_writer()
177 mutex_unlock(&iint->mutex); in ima_check_last_writer()
189 struct integrity_iint_cache *iint; in ima_file_free() local
194 iint = integrity_iint_find(inode); in ima_file_free()
195 if (!iint) in ima_file_free()
198 ima_check_last_writer(iint, inode, file); in ima_file_free()
206 struct integrity_iint_cache *iint = NULL; in process_measurement() local
244 iint = integrity_inode_get(inode); in process_measurement()
245 if (!iint) in process_measurement()
250 ima_rdwr_violation_check(file, iint, action & IMA_MEASURE, in process_measurement()
260 mutex_lock(&iint->mutex); in process_measurement()
262 if (test_and_clear_bit(IMA_CHANGE_ATTR, &iint->atomic_flags)) in process_measurement()
264 iint->flags &= ~(IMA_APPRAISE | IMA_APPRAISED | in process_measurement()
273 if (test_and_clear_bit(IMA_CHANGE_XATTR, &iint->atomic_flags) || in process_measurement()
277 iint->flags &= ~IMA_DONE_MASK; in process_measurement()
278 iint->measured_pcrs = 0; in process_measurement()
285 iint->flags |= action; in process_measurement()
287 action &= ~((iint->flags & (IMA_DONE_MASK ^ IMA_MEASURED)) >> 1); in process_measurement()
290 if ((action & IMA_MEASURE) && (iint->measured_pcrs & (0x1 << pcr))) in process_measurement()
295 !(test_bit(IMA_DIGSIG, &iint->atomic_flags))) { in process_measurement()
299 set_bit(IMA_DIGSIG, &iint->atomic_flags); in process_measurement()
300 iint->flags |= IMA_HASHED; in process_measurement()
302 set_bit(IMA_UPDATE_XATTR, &iint->atomic_flags); in process_measurement()
311 rc = ima_get_cache_status(iint, func); in process_measurement()
326 if (iint->flags & IMA_MODSIG_ALLOWED) { in process_measurement()
330 iint->flags & IMA_MEASURED) in process_measurement()
337 rc = ima_collect_measurement(iint, file, buf, size, hash_algo, modsig); in process_measurement()
345 ima_store_measurement(iint, file, pathname, in process_measurement()
349 rc = ima_check_blacklist(iint, modsig, pcr); in process_measurement()
352 rc = ima_appraise_measurement(func, iint, file, in process_measurement()
362 ima_audit_measurement(iint, pathname); in process_measurement()
364 if ((file->f_flags & O_DIRECT) && (iint->flags & IMA_PERMIT_DIRECTIO)) in process_measurement()
377 if ((mask & MAY_WRITE) && test_bit(IMA_DIGSIG, &iint->atomic_flags) && in process_measurement()
378 !(iint->flags & IMA_NEW_FILE)) in process_measurement()
380 mutex_unlock(&iint->mutex); in process_measurement()
390 set_bit(IMA_UPDATE_XATTR, &iint->atomic_flags); in process_measurement()
524 struct integrity_iint_cache *iint; in __ima_inode_hash() local
530 iint = integrity_iint_find(inode); in __ima_inode_hash()
531 if (!iint) in __ima_inode_hash()
534 mutex_lock(&iint->mutex); in __ima_inode_hash()
540 if (!iint->ima_hash) { in __ima_inode_hash()
541 mutex_unlock(&iint->mutex); in __ima_inode_hash()
548 copied_size = min_t(size_t, iint->ima_hash->length, buf_size); in __ima_inode_hash()
549 memcpy(buf, iint->ima_hash->digest, copied_size); in __ima_inode_hash()
551 hash_algo = iint->ima_hash->algo; in __ima_inode_hash()
552 mutex_unlock(&iint->mutex); in __ima_inode_hash()
623 struct integrity_iint_cache *iint; in ima_post_create_tmpfile() local
635 iint = integrity_inode_get(inode); in ima_post_create_tmpfile()
636 if (!iint) in ima_post_create_tmpfile()
640 set_bit(IMA_UPDATE_XATTR, &iint->atomic_flags); in ima_post_create_tmpfile()
641 iint->ima_file_status = INTEGRITY_PASS; in ima_post_create_tmpfile()
655 struct integrity_iint_cache *iint; in ima_post_path_mknod() local
668 iint = integrity_inode_get(inode); in ima_post_path_mknod()
669 if (!iint) in ima_post_path_mknod()
673 iint->flags |= IMA_NEW_FILE; in ima_post_path_mknod()
871 struct integrity_iint_cache iint = {}; in process_buffer_measurement() local
872 struct ima_event_data event_data = {.iint = &iint, in process_buffer_measurement()
919 iint.ima_hash = &hash.hdr; in process_buffer_measurement()
920 iint.ima_hash->algo = ima_hash_algo; in process_buffer_measurement()
921 iint.ima_hash->length = hash_digest_size[ima_hash_algo]; in process_buffer_measurement()
923 ret = ima_calc_buffer_hash(buf, size, iint.ima_hash); in process_buffer_measurement()
933 iint.ima_hash); in process_buffer_measurement()
944 memcpy(digest, iint.ima_hash->digest, digest_hash_len); in process_buffer_measurement()