cregit-Linux how code gets into the kernel

Release 4.10 security/apparmor/crypto.c

/*
 * AppArmor security module
 *
 * This file contains AppArmor policy loading interface function definitions.
 *
 * Copyright 2013 Canonical Ltd.
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation, version 2 of the
 * License.
 *
 * Fns to provide a checksum of policy that has been loaded this can be
 * compared to userspace policy compiles to check loaded policy is what
 * it should be.
 */

#include <crypto/hash.h>

#include "include/apparmor.h"
#include "include/crypto.h"


static unsigned int apparmor_hash_size;


static struct crypto_shash *apparmor_tfm;


unsigned int aa_hash_size(void) { return apparmor_hash_size; }

Contributors

PersonTokensPropCommitsCommitProp
john johansenjohn johansen11100.00%1100.00%
Total11100.00%1100.00%


int aa_calc_profile_hash(struct aa_profile *profile, u32 version, void *start, size_t len) { struct { struct shash_desc shash; char ctx[crypto_shash_descsize(apparmor_tfm)]; } desc; int error = -ENOMEM; u32 le32_version = cpu_to_le32(version); if (!aa_g_hash_policy) return 0; if (!apparmor_tfm) return 0; profile->hash = kzalloc(apparmor_hash_size, GFP_KERNEL); if (!profile->hash) goto fail; desc.shash.tfm = apparmor_tfm; desc.shash.flags = 0; error = crypto_shash_init(&desc.shash); if (error) goto fail; error = crypto_shash_update(&desc.shash, (u8 *) &le32_version, 4); if (error) goto fail; error = crypto_shash_update(&desc.shash, (u8 *) start, len); if (error) goto fail; error = crypto_shash_final(&desc.shash, profile->hash); if (error) goto fail; return 0; fail: kfree(profile->hash); profile->hash = NULL; return error; }

Contributors

PersonTokensPropCommitsCommitProp
john johansenjohn johansen15672.56%133.33%
tyler hickstyler hicks5123.72%133.33%
arnd bergmannarnd bergmann83.72%133.33%
Total215100.00%3100.00%


static int __init init_profile_hash(void) { struct crypto_shash *tfm; if (!apparmor_initialized) return 0; tfm = crypto_alloc_shash("sha1", 0, CRYPTO_ALG_ASYNC); if (IS_ERR(tfm)) { int error = PTR_ERR(tfm); AA_ERROR("failed to setup profile sha1 hashing: %d\n", error); return error; } apparmor_tfm = tfm; apparmor_hash_size = crypto_shash_digestsize(apparmor_tfm); aa_info_message("AppArmor sha1 policy hashing enabled"); return 0; }

Contributors

PersonTokensPropCommitsCommitProp
john johansenjohn johansen7696.20%150.00%
tyler hickstyler hicks33.80%150.00%
Total79100.00%2100.00%

late_initcall(init_profile_hash);

Overall Contributors

PersonTokensPropCommitsCommitProp
john johansenjohn johansen26780.66%133.33%
tyler hickstyler hicks5616.92%133.33%
arnd bergmannarnd bergmann82.42%133.33%
Total331100.00%3100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.