mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-12-05 01:54:09 +08:00
876979c930
Historically a lot of these existed because we did not have a distinction between what was modular code and what was providing support to modules via EXPORT_SYMBOL and friends. That changed when we forked out support for the latter into the export.h file. This means we should be able to reduce the usage of module.h in code that is obj-y Makefile or bool Kconfig. The advantage in removing such instances is that module.h itself sources about 15 other headers; adding significantly to what we feed cpp, and it can obscure what headers we are effectively using. Since module.h might have been the implicit source for init.h (for __init) and for export.h (for EXPORT_SYMBOL) we consider each instance for the presence of either and replace as needed. Cc: James Morris <jmorris@namei.org> Cc: "Serge E. Hallyn" <serge@hallyn.com> Cc: John Johansen <john.johansen@canonical.com> Cc: Mimi Zohar <zohar@linux.ibm.com> Cc: Dmitry Kasatkin <dmitry.kasatkin@gmail.com> Cc: David Howells <dhowells@redhat.com> Cc: linux-security-module@vger.kernel.org Cc: linux-integrity@vger.kernel.org Cc: keyrings@vger.kernel.org Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: James Morris <james.morris@microsoft.com>
47 lines
1.3 KiB
C
47 lines
1.3 KiB
C
/*
|
|
* Copyright (C) 2010 IBM Corporation
|
|
* Copyright (C) 2010 Politecnico di Torino, Italy
|
|
* TORSEC group -- http://security.polito.it
|
|
*
|
|
* Authors:
|
|
* Mimi Zohar <zohar@us.ibm.com>
|
|
* Roberto Sassu <roberto.sassu@polito.it>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, version 2 of the License.
|
|
*
|
|
* See Documentation/security/keys/trusted-encrypted.rst
|
|
*/
|
|
|
|
#include <linux/uaccess.h>
|
|
#include <linux/err.h>
|
|
#include <keys/trusted-type.h>
|
|
#include <keys/encrypted-type.h>
|
|
#include "encrypted.h"
|
|
|
|
/*
|
|
* request_trusted_key - request the trusted key
|
|
*
|
|
* Trusted keys are sealed to PCRs and other metadata. Although userspace
|
|
* manages both trusted/encrypted key-types, like the encrypted key type
|
|
* data, trusted key type data is not visible decrypted from userspace.
|
|
*/
|
|
struct key *request_trusted_key(const char *trusted_desc,
|
|
const u8 **master_key, size_t *master_keylen)
|
|
{
|
|
struct trusted_key_payload *tpayload;
|
|
struct key *tkey;
|
|
|
|
tkey = request_key(&key_type_trusted, trusted_desc, NULL);
|
|
if (IS_ERR(tkey))
|
|
goto error;
|
|
|
|
down_read(&tkey->sem);
|
|
tpayload = tkey->payload.data[0];
|
|
*master_key = tpayload->key;
|
|
*master_keylen = tpayload->key_len;
|
|
error:
|
|
return tkey;
|
|
}
|