fs-verity: define a function to return the integrity protected file digest
authorMimi Zohar <zohar@linux.ibm.com>
Tue, 23 Nov 2021 18:37:52 +0000 (13:37 -0500)
committerMimi Zohar <zohar@linux.ibm.com>
Sun, 1 May 2022 20:39:36 +0000 (16:39 -0400)
commit246d921646c071b878480997c294db6c83215b06
tree15becd1e0c5d5546f70a8712df57cd4a5986685b
parent09091c44cb737256f588050e363c4675d88aaac3
fs-verity: define a function to return the integrity protected file digest

Define a function named fsverity_get_digest() to return the verity file
digest and the associated hash algorithm (enum hash_algo).

This assumes that before calling fsverity_get_digest() the file must have
been opened, which is even true for the IMA measure/appraise on file
open policy rule use case (func=FILE_CHECK).  do_open() calls vfs_open()
immediately prior to ima_file_check().

Acked-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
fs/verity/Kconfig
fs/verity/fsverity_private.h
fs/verity/measure.c
include/linux/fsverity.h