linux/fs/verity
Eric Biggers 622699cfe6 fs-verity: support reading Merkle tree with ioctl
Add support for FS_VERITY_METADATA_TYPE_MERKLE_TREE to
FS_IOC_READ_VERITY_METADATA.  This allows a userspace server program to
retrieve the Merkle tree of a verity file for serving to a client which
implements fs-verity compatible verification.  See the patch which
introduced FS_IOC_READ_VERITY_METADATA for more details.

This has been tested using a new xfstest which calls this ioctl via a
new subcommand for the 'fsverity' program from fsverity-utils.

Link: https://lore.kernel.org/r/20210115181819.34732-5-ebiggers@kernel.org
Reviewed-by: Victor Hsieh <victorhsieh@google.com>
Reviewed-by: Jaegeuk Kim <jaegeuk@kernel.org>
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Eric Biggers <ebiggers@google.com>
2021-02-07 14:51:14 -08:00
..
enable.c fs-verity: rename "file measurement" to "file digest" 2020-11-16 11:40:12 -08:00
fsverity_private.h fs-verity: don't pass whole descriptor to fsverity_verify_signature() 2021-02-07 14:51:09 -08:00
hash_algs.c fs-verity: remove filenames from file comments 2020-11-16 11:40:10 -08:00
init.c fs-verity: remove filenames from file comments 2020-11-16 11:40:10 -08:00
Kconfig fs-verity: support builtin file signatures 2019-08-12 19:33:50 -07:00
Makefile fs-verity: add FS_IOC_READ_VERITY_METADATA ioctl 2021-02-07 14:51:11 -08:00
measure.c fs-verity: rename "file measurement" to "file digest" 2020-11-16 11:40:12 -08:00
open.c fs-verity: don't pass whole descriptor to fsverity_verify_signature() 2021-02-07 14:51:09 -08:00
read_metadata.c fs-verity: support reading Merkle tree with ioctl 2021-02-07 14:51:14 -08:00
signature.c fs-verity: don't pass whole descriptor to fsverity_verify_signature() 2021-02-07 14:51:09 -08:00
verify.c fs-verity: remove filenames from file comments 2020-11-16 11:40:10 -08:00