From f4815544c1bd24e9151ffa64edda7bc68f0e156d Mon Sep 17 00:00:00 2001 From: Victor Hsieh Date: Tue, 18 Dec 2018 01:34:52 -0800 Subject: sys/linux: add fs-verity ioctls This adds 2 ioctls and an argument type: - FS_IOC_ENABLE_VERITY - FS_IOC_MEASURE_VERITY - struct fsverity_digest Note fs-verity on-disk structs are not yet added. --- sys/linux/fs_ioctl.txt | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'sys/linux/fs_ioctl.txt') diff --git a/sys/linux/fs_ioctl.txt b/sys/linux/fs_ioctl.txt index 977bfdbac..37abbe132 100644 --- a/sys/linux/fs_ioctl.txt +++ b/sys/linux/fs_ioctl.txt @@ -4,6 +4,7 @@ include include include +include include ioctl$FIBMAP(fd fd, cmd const[FIBMAP], arg ptr[in, int32]) @@ -27,6 +28,8 @@ ioctl$FS_IOC_SET_ENCRYPTION_POLICY(fd fd, cmd const[FS_IOC_SET_ENCRYPTION_POLICY ioctl$FS_IOC_GET_ENCRYPTION_POLICY(fd fd, cmd const[FS_IOC_GET_ENCRYPTION_POLICY], arg ptr[out, array[int8, 16]]) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(fd fd, cmd const[FS_IOC_GET_ENCRYPTION_PWSALT], arg ptr[out, fscrypt_policy]) ioctl$FS_IOC_GETFSMAP(fd fd, cmd const[FS_IOC_GETFSMAP], arg ptr[in, fsmap_head]) +ioctl$FS_IOC_ENABLE_VERITY(fd fd, cmd const[FS_IOC_ENABLE_VERITY]) +ioctl$FS_IOC_MEASURE_VERITY(fd fd, cmd const[FS_IOC_MEASURE_VERITY], arg ptr[inout, fsverity_digest]) fscrypt_policy { version const[0, int8] @@ -48,6 +51,14 @@ type fscrypt_policy_mode_t[CONTENTS, FILENAMES] { fs_policy_flags = FS_POLICY_FLAGS_PAD_4, FS_POLICY_FLAGS_PAD_8, FS_POLICY_FLAGS_PAD_16 +fsverity_digest_algorithm_flags = FS_VERITY_ALG_SHA256, FS_VERITY_ALG_SHA512, FS_VERITY_ALG_CRC32C + +fsverity_digest { + digest_algorithm flags[fsverity_digest_algorithm_flags, int16] + digest_size len[digest, int16] + digest array[int8] +} + space_resv { l_type const[0, int16] l_whence flags[seek_whence, int16] -- cgit mrf-deployment