fs-verity: add the hook for file ->open()

Browse source

Add the fsverity_file_open() function, which prepares an fs-verity file
to be read from.  If not already done, it loads the fs-verity descriptor
from the filesystem and sets up an fsverity_info structure for the inode
which describes the Merkle tree and contains the file measurement.  It
also denies all attempts to open verity files for writing.

This commit also begins the include/linux/fsverity.h header, which
declares the interface between fs/verity/ and filesystems.

Reviewed-by: Theodore Ts'o <tytso@mit.edu>
Reviewed-by: Jaegeuk Kim <jaegeuk@kernel.org>
Signed-off-by: Eric Biggers <ebiggers@google.com>

...

This commit is contained in:

Eric Biggers 2019-07-22 09:26:22 -07:00

parent 5585f2af73

commit fd2d1acfca

5 changed files with 449 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

fs/verity/Makefile

View file

54

fs/verity/fsverity_private.h

View file

6

fs/verity/init.c

View file

318

fs/verity/open.c

View file

71

include/linux/fsverity.h

View file