From df75b68387635d0969ceba34688dcce35430cf79 Mon Sep 17 00:00:00 2001 From: lihehe Date: Mon, 23 Oct 2023 21:11:07 +0800 Subject: [PATCH] add ioctl of code signing features in fs-verity Signed-off-by: lihehe Change-Id: I2f84d7dda7202989c90d79ce5287fc0818dfa32d --- .../prebuilts/usr/include/linux/fsverity.h | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/linux-5.10/prebuilts/usr/include/linux/fsverity.h b/linux-5.10/prebuilts/usr/include/linux/fsverity.h index 5013567..3e6f5cc 100644 --- a/linux-5.10/prebuilts/usr/include/linux/fsverity.h +++ b/linux-5.10/prebuilts/usr/include/linux/fsverity.h @@ -40,4 +40,25 @@ struct fsverity_digest { }; #define FS_IOC_ENABLE_VERITY _IOW('f', 133, struct fsverity_enable_arg) #define FS_IOC_MEASURE_VERITY _IOWR('f', 134, struct fsverity_digest) + +#define FS_VERITY_CODE_SIGN_VERSION 5 + +struct code_sign_enable_arg { + __u32 version; + __u32 hash_algorithm; + __u32 block_size; + __u32 salt_size; + __u64 salt_ptr; + __u32 sig_size; + __u32 __reserved1; + __u64 sig_ptr; + __u64 __reserved2[7]; + __u32 __reserved3; + __u32 flags; + __u64 data_size; + __u64 tree_offset; + __u64 root_hash_ptr; +}; + +#define FS_IOC_ENABLE_CODE_SIGN _IOW('f', 140, struct code_sign_enable_arg) #endif -- Gitee