linux/security/integrity/evm
Dmitry Kasatkin 7626676320 evm: provide a function to set the EVM key from the kernel
A crypto HW kernel module can possibly initialize the EVM key from the
kernel __init code to enable EVM before calling the 'init' process.
This patch provides a function evm_set_key() to set the EVM key
directly without using the KEY subsystem.

Changes in v4:
* kernel-doc style for evm_set_key

Changes in v3:
* error reporting moved to evm_set_key
* EVM_INIT_HMAC moved to evm_set_key
* added bitop to prevent key setting race

Changes in v2:
* use size_t for key size instead of signed int
* provide EVM_MAX_KEY_SIZE macro in <linux/evm.h>
* provide EVM_MIN_KEY_SIZE macro in <linux/evm.h>

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2015-12-15 08:53:36 -05:00
..
evm_crypto.c evm: provide a function to set the EVM key from the kernel 2015-12-15 08:53:36 -05:00
evm_main.c evm: enable EVM when X509 certificate is loaded 2015-12-15 08:50:48 -05:00
evm_posix_acl.c ima: fix script messages 2013-10-25 13:17:19 -04:00
evm_secfs.c evm: provide a function to set the EVM key from the kernel 2015-12-15 08:53:36 -05:00
evm.h evm: enable EVM when X509 certificate is loaded 2015-12-15 08:50:48 -05:00
Kconfig evm: load an x509 certificate from the kernel 2015-12-15 08:31:19 -05:00
Makefile evm: posix acls modify i_mode 2011-09-14 15:24:51 -04:00