]> asedeno.scripts.mit.edu Git - linux.git/commit
fs-verity: implement FS_IOC_MEASURE_VERITY ioctl
authorEric Biggers <ebiggers@google.com>
Mon, 22 Jul 2019 16:26:23 +0000 (09:26 -0700)
committerEric Biggers <ebiggers@google.com>
Tue, 13 Aug 2019 02:33:50 +0000 (19:33 -0700)
commit4dd893d832cf4da5409e1fecea9c4f6452a93f2b
treee6d566b754abe0b525cc30400f8d414507c691db
parent3fda4c617e84c21c8a03b7cc2b3dbfe6c6461592
fs-verity: implement FS_IOC_MEASURE_VERITY ioctl

Add a function for filesystems to call to implement the
FS_IOC_MEASURE_VERITY ioctl.  This ioctl retrieves the file measurement
that fs-verity calculated for the given file and is enforcing for reads;
i.e., reads that don't match this hash will fail.  This ioctl can be
used for authentication or logging of file measurements in userspace.

See the "FS_IOC_MEASURE_VERITY" section of
Documentation/filesystems/fsverity.rst for the documentation.

Reviewed-by: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Jaegeuk Kim <jaegeuk@kernel.org>
Signed-off-by: Eric Biggers <ebiggers@google.com>
fs/verity/Makefile
fs/verity/measure.c [new file with mode: 0644]
include/linux/fsverity.h