1 /* SPDX-License-Identifier: GPL-2.0-only */
3 * Copyright (C) 2009 IBM Corporation
4 * Author: Mimi Zohar <zohar@us.ibm.com>
7 #ifndef _LINUX_INTEGRITY_H
8 #define _LINUX_INTEGRITY_H
11 #include <linux/iversion.h>
13 enum integrity_status {
15 INTEGRITY_PASS_IMMUTABLE,
17 INTEGRITY_FAIL_IMMUTABLE,
23 #ifdef CONFIG_INTEGRITY
24 extern void __init integrity_load_keys(void);
27 static inline void integrity_load_keys(void)
30 #endif /* CONFIG_INTEGRITY */
32 /* An inode's attributes for detection of changes */
33 struct integrity_inode_attributes {
34 u64 version; /* track inode changes */
40 * On stacked filesystems the i_version alone is not enough to detect file data
41 * or metadata change. Additional metadata is required.
44 integrity_inode_attrs_store(struct integrity_inode_attributes *attrs,
45 u64 i_version, const struct inode *inode)
47 attrs->version = i_version;
48 attrs->dev = inode->i_sb->s_dev;
49 attrs->ino = inode->i_ino;
53 * On stacked filesystems detect whether the inode or its content has changed.
56 integrity_inode_attrs_changed(const struct integrity_inode_attributes *attrs,
57 const struct inode *inode)
59 return (inode->i_sb->s_dev != attrs->dev ||
60 inode->i_ino != attrs->ino ||
61 !inode_eq_iversion(inode, attrs->version));
65 #endif /* _LINUX_INTEGRITY_H */