1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * fs-verity module initialization and logging
4 *
5 * Copyright 2019 Google LLC
6 */
7
8 #include "fsverity_private.h"
9
10 #include <linux/ratelimit.h>
11
12 #ifdef CONFIG_SYSCTL
13 static struct ctl_table_header *fsverity_sysctl_header;
14
15 static struct ctl_table fsverity_sysctl_table[] = {
16 #ifdef CONFIG_FS_VERITY_BUILTIN_SIGNATURES
17 {
18 .procname = "require_signatures",
19 .data = &fsverity_require_signatures,
20 .maxlen = sizeof(int),
21 .mode = 0644,
22 .proc_handler = proc_dointvec_minmax,
23 .extra1 = SYSCTL_ZERO,
24 .extra2 = SYSCTL_ONE,
25 },
26 #endif
27 { }
28 };
29
fsverity_init_sysctl(void)30 static void __init fsverity_init_sysctl(void)
31 {
32 fsverity_sysctl_header = register_sysctl("fs/verity",
33 fsverity_sysctl_table);
34 if (!fsverity_sysctl_header)
35 panic("fsverity sysctl registration failed");
36 }
37 #else /* CONFIG_SYSCTL */
fsverity_init_sysctl(void)38 static inline void fsverity_init_sysctl(void)
39 {
40 }
41 #endif /* !CONFIG_SYSCTL */
42
fsverity_msg(const struct inode * inode,const char * level,const char * fmt,...)43 void fsverity_msg(const struct inode *inode, const char *level,
44 const char *fmt, ...)
45 {
46 static DEFINE_RATELIMIT_STATE(rs, DEFAULT_RATELIMIT_INTERVAL,
47 DEFAULT_RATELIMIT_BURST);
48 struct va_format vaf;
49 va_list args;
50
51 if (!__ratelimit(&rs))
52 return;
53
54 va_start(args, fmt);
55 vaf.fmt = fmt;
56 vaf.va = &args;
57 if (inode)
58 printk("%sfs-verity (%s, inode %lu): %pV\n",
59 level, inode->i_sb->s_id, inode->i_ino, &vaf);
60 else
61 printk("%sfs-verity: %pV\n", level, &vaf);
62 va_end(args);
63 }
64
fsverity_init(void)65 static int __init fsverity_init(void)
66 {
67 fsverity_check_hash_algs();
68 fsverity_init_info_cache();
69 fsverity_init_workqueue();
70 fsverity_init_sysctl();
71 fsverity_init_signature();
72 return 0;
73 }
74 late_initcall(fsverity_init)
75
