77 lines
2.7 KiB
C
77 lines
2.7 KiB
C
|
/*
|
||
|
|
* fscrypto_knox_private.h
|
||
|
|
*
|
||
|
|
* Created on: Oct 11, 2018
|
||
|
|
* Author: olic.moon
|
||
|
|
*/
|
||
|
|
|
||
|
|
#ifndef FS_CRYPTO_FSCRYPT_KNOX_PRIVATE_H_
|
||
|
|
#define FS_CRYPTO_FSCRYPT_KNOX_PRIVATE_H_
|
||
|
|
|
||
|
|
#ifdef CONFIG_DDAR
|
||
|
|
#include <sdp/dd.h>
|
||
|
|
|
||
|
|
#define FSCRYPT_KNOX_FLG_DDAR_SHIFT 8
|
||
|
|
#define FSCRYPT_KNOX_FLG_DDAR_MASK 0x0000FF00
|
||
|
|
#define FSCRYPT_KNOX_FLG_DDAR_ENABLED (DD_POLICY_ENABLED << FSCRYPT_KNOX_FLG_DDAR_SHIFT)
|
||
|
|
#define FSCRYPT_KNOX_FLG_DDAR_USER_SPACE_CRYPTO (DD_POLICY_USER_SPACE_CRYPTO << FSCRYPT_KNOX_FLG_DDAR_SHIFT)
|
||
|
|
#define FSCRYPT_KNOX_FLG_DDAR_KERNEL_CRYPTO (DD_POLICY_KERNEL_CRYPTO << FSCRYPT_KNOX_FLG_DDAR_SHIFT)
|
||
|
|
#define FSCRYPT_KNOX_FLG_DDAR_GID_RESTRICTION (DD_POLICY_GID_RESTRICTION << FSCRYPT_KNOX_FLG_DDAR_SHIFT)
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_MASK 0xFFFF0000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_ENABLED 0x00100000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_IS_SENSITIVE 0x00200000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_MULTI_ENGINE 0x00400000// eCryptfs header contains engine id.
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_TO_SET_SENSITIVE 0x00800000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_TO_SET_PROTECTED 0x01000000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_DECRYPTED_FEK_SET 0x02000000// Be careful, this flag must be avoided to be set to xattr.
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_IS_EMPTY_CTFM_SET 0x04000000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_TO_CLEAR_NONCE 0x08000000
|
||
|
|
//#define FSCRYPT_KNOX_FLG_SDP_TO_CLEAR_CACHE 0x10000000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_IS_CHAMBER_DIR 0x20000000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_IS_DIRECTORY 0x40000000
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_IS_PROTECTED 0x80000000
|
||
|
|
#ifdef CONFIG_SDP_KEY_DUMP
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_IS_TRACED 0x00000001
|
||
|
|
#define FSCRYPT_KNOX_FLG_SDP_TRACE_MASK 0x000000FF
|
||
|
|
#endif
|
||
|
|
|
||
|
|
union fscrypt_context;
|
||
|
|
|
||
|
|
#ifdef CONFIG_DDAR
|
||
|
|
static inline int fscrypt_dd_flg_enabled(int flags)
|
||
|
|
{
|
||
|
|
return (flags & FSCRYPT_KNOX_FLG_DDAR_ENABLED) ? 1:0;
|
||
|
|
}
|
||
|
|
|
||
|
|
static inline int fscrypt_dd_flg_userspace_crypto(int flags)
|
||
|
|
{
|
||
|
|
return (flags & FSCRYPT_KNOX_FLG_DDAR_USER_SPACE_CRYPTO) ? 1:0;
|
||
|
|
}
|
||
|
|
|
||
|
|
static inline int fscrypt_dd_flg_kernel_crypto(int flags)
|
||
|
|
{
|
||
|
|
return (flags & FSCRYPT_KNOX_FLG_DDAR_KERNEL_CRYPTO) ? 1:0;
|
||
|
|
}
|
||
|
|
|
||
|
|
static inline int fscrypt_dd_flg_gid_restricted(int flags, int gid)
|
||
|
|
{
|
||
|
|
return (flags & FSCRYPT_KNOX_FLG_DDAR_GID_RESTRICTION) ? 1:0;
|
||
|
|
}
|
||
|
|
|
||
|
|
int update_encryption_context_with_dd_policy(
|
||
|
|
struct inode *inode,
|
||
|
|
const struct dd_policy *policy);
|
||
|
|
|
||
|
|
void *dd_get_info(const struct inode *inode);
|
||
|
|
|
||
|
|
void fscrypt_dd_set_count(long count);
|
||
|
|
long fscrypt_dd_get_count(void);
|
||
|
|
void fscrypt_dd_inc_count(void);
|
||
|
|
void fscrypt_dd_dec_count(void);
|
||
|
|
int fscrypt_dd_is_locked(void);
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#endif /* FS_CRYPTO_FSCRYPT_KNOX_PRIVATE_H_ */
|