fs-verity: move structs needed for file signing to UAPI header
authorEric Biggers <ebiggers@google.com>
Fri, 13 Nov 2020 21:19:18 +0000 (13:19 -0800)
committerEric Biggers <ebiggers@google.com>
Tue, 24 Nov 2020 03:30:14 +0000 (19:30 -0800)
commitbde493349025ca0559e2fff88592935af3b8df19
treee1be04244bfc62c317c1e8b77c2bfbd9ac838bdb
parented45e201649344412445d6f65f0473a6112f0bcd
fs-verity: move structs needed for file signing to UAPI header

Although it isn't used directly by the ioctls,
"struct fsverity_descriptor" is required by userspace programs that need
to compute fs-verity file digests in a standalone way.  Therefore
it's also needed to sign files in a standalone way.

Similarly, "struct fsverity_formatted_digest" (previously called
"struct fsverity_signed_digest" which was misleading) is also needed to
sign files if the built-in signature verification is being used.

Therefore, move these structs to the UAPI header.

While doing this, try to make it clear that the signature-related fields
in fsverity_descriptor aren't used in the file digest computation.

Acked-by: Luca Boccassi <luca.boccassi@microsoft.com>
Link: https://lore.kernel.org/r/20201113211918.71883-5-ebiggers@kernel.org
Signed-off-by: Eric Biggers <ebiggers@google.com>
Documentation/filesystems/fsverity.rst
fs/verity/fsverity_private.h
include/uapi/linux/fsverity.h