dm crypt: log aead integrity violations to audit subsystem
authorMichael Weiß <michael.weiss@aisec.fraunhofer.de>
Sat, 4 Sep 2021 09:59:30 +0000 (11:59 +0200)
committerMike Snitzer <snitzer@redhat.com>
Wed, 27 Oct 2021 20:54:37 +0000 (16:54 -0400)
commit58d0f180bd91a02e92f7794601ff607f51fab131
tree4180ea9da92915c45cf7c089157c663fcc5f78e4
parent82bb85998cc9a3d26f6086c80fae7888db3b3fd9
dm crypt: log aead integrity violations to audit subsystem

Since dm-crypt target can be stacked on dm-integrity targets to
provide authenticated encryption, integrity violations are recognized
here during aead computation. We use the dm-audit submodule to
signal those events to user space, too.

The construction and destruction of crypt device mappings are also
logged as audit events.

Signed-off-by: Michael Weiß <michael.weiss@aisec.fraunhofer.de>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
drivers/md/dm-crypt.c