• Dmitry Kasatkin's avatar
    evm: provide a function to set the EVM key from the kernel · 76266763
    Dmitry Kasatkin authored
    A crypto HW kernel module can possibly initialize the EVM key from the
    kernel __init code to enable EVM before calling the 'init' process.
    This patch provides a function evm_set_key() to set the EVM key
    directly without using the KEY subsystem.
    
    Changes in v4:
    * kernel-doc style for evm_set_key
    
    Changes in v3:
    * error reporting moved to evm_set_key
    * EVM_INIT_HMAC moved to evm_set_key
    * added bitop to prevent key setting race
    
    Changes in v2:
    * use size_t for key size instead of signed int
    * provide EVM_MAX_KEY_SIZE macro in <linux/evm.h>
    * provide EVM_MIN_KEY_SIZE macro in <linux/evm.h>
    Signed-off-by: default avatarDmitry Kasatkin <dmitry.kasatkin@huawei.com>
    Signed-off-by: default avatarMimi Zohar <zohar@linux.vnet.ibm.com>
    76266763
evm_secfs.c 2.26 KB