samsung_sm8750/android_kernel_samsung_sm8750
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add samsung specific changes

Browse Source
This commit is contained in:
Sascha Nesterovic
2025-08-11 14:29:00 +02:00
parent c66122e619
commit 4d134a1294
2688 changed files with 1127995 additions and 11475 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
security/integrity/iint.c
View File

@@ -19,9 +19,6 @@
#include <linux/uaccess.h>
#include <linux/security.h>
#include <linux/lsm_hooks.h>
#ifdef CONFIG_FIVE
#include <uapi/linux/magic.h>
#endif
#include "integrity.h"
static struct rb_root integrity_iint_tree = RB_ROOT;
@@ -112,13 +109,6 @@ static void iint_init_always(struct integrity_iint_cache *iint,
static void iint_free(struct integrity_iint_cache *iint)
{
#ifdef CONFIG_FIVE
kfree(iint->five_label);
iint->five_label = NULL;
iint->five_flags = 0UL;
iint->five_status = FIVE_FILE_UNKNOWN;
iint->five_signing = false;
#endif
kfree(iint->ima_hash);
mutex_destroy(&iint->mutex);
kmem_cache_free(iint_cache, iint);
@@ -190,10 +180,6 @@ void integrity_inode_free(struct inode *inode)
write_lock(&integrity_iint_lock);
iint = __integrity_iint_find(inode);
if (!iint) {
write_unlock(&integrity_iint_lock);
return;
}
rb_erase(&iint->rb_node, &integrity_iint_tree);
write_unlock(&integrity_iint_lock);
@@ -205,11 +191,6 @@ static void iint_init_once(void *foo)
struct integrity_iint_cache *iint = (struct integrity_iint_cache *) foo;
memset(iint, 0, sizeof(*iint));
#ifdef CONFIG_FIVE
iint->five_flags = 0UL;
iint->five_status = FIVE_FILE_UNKNOWN;
iint->five_signing = false;
#endif
}
static int __init integrity_iintcache_init(void)

26
security/integrity/integrity.h
View File

@@ -18,17 +18,6 @@
#include <crypto/hash.h>
#include <linux/key.h>
#include <linux/audit.h>
#include <crypto/hash_info.h>
struct integrity_label;
enum five_file_integrity {
FIVE_FILE_UNKNOWN,
FIVE_FILE_FAIL,
FIVE_FILE_RSA,
FIVE_FILE_DMVERITY,
FIVE_FILE_FSVERITY,
FIVE_FILE_HMAC
};
/* iint action cache flags */
#define IMA_MEASURE 0x00000001
@@ -70,10 +59,6 @@ enum five_file_integrity {
#define IMA_READ_APPRAISED 0x00080000
#define IMA_CREDS_APPRAISE 0x00100000
#define IMA_CREDS_APPRAISED 0x00200000
#define FIVE_DMVERITY_PROTECTED 0x00040000
#define FIVE_TRUSTED_FILE 0x00080000
#define IMA_APPRAISE_SUBMASK (IMA_FILE_APPRAISE | IMA_MMAP_APPRAISE | \
IMA_BPRM_APPRAISE | IMA_READ_APPRAISE | \
IMA_CREDS_APPRAISE)
@@ -188,12 +173,6 @@ struct integrity_iint_cache {
enum integrity_status ima_creds_status:4;
enum integrity_status evm_status:4;
struct ima_digest_data *ima_hash;
#ifdef CONFIG_FIVE
unsigned long five_flags;
enum five_file_integrity five_status;
struct integrity_label *five_label;
bool five_signing;
#endif
};
/* rbtree tree calls to lookup, insert, delete
@@ -208,8 +187,7 @@ int integrity_kernel_read(struct file *file, loff_t offset,
#define INTEGRITY_KEYRING_IMA 1
#define INTEGRITY_KEYRING_PLATFORM 2
#define INTEGRITY_KEYRING_MACHINE 3
#define INTEGRITY_KEYRING_FIVE 4
#define INTEGRITY_KEYRING_MAX 5
#define INTEGRITY_KEYRING_MAX 4
extern struct dentry *integrity_dir;
@@ -225,8 +203,6 @@ int __init integrity_init_keyring(const unsigned int id);
int __init integrity_load_x509(const unsigned int id, const char *path);
int __init integrity_load_cert(const unsigned int id, const char *source,
const void *data, size_t len, key_perm_t perm);
int __init integrity_load_x509_from_mem(const unsigned int id,
const char *data, size_t size);
#else
static inline int integrity_digsig_verify(const unsigned int id,