Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\integrity\ima\ima_appraise.c Create Date:2022-07-28 19:59:24
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:modsig_verify - verify modsig signature* Verify whether the signature matches the file contents.* Return 0 on success, error code otherwise.

Proto:static int modsig_verify(enum ima_hooks func, const struct modsig *modsig, enum integrity_status *status, const char **cause)

Type:int

Parameter:

TypeParameterName
enum ima_hooksfunc
const struct modsig *modsig
enum integrity_status *status
const char **cause
292  rc = integrity_modsig_verify(INTEGRITY_KEYRING_IMA, modsig)
293  If IS_ENABLED(CONFIG_FOO) evaluates to 1 if CONFIG_FOO is set to 'y' or 'm',* 0 otherwise.(CONFIG_INTEGRITY_PLATFORM_KEYRING) && rc && func == KEXEC_KERNEL_CHECK Then rc = integrity_modsig_verify(INTEGRITY_KEYRING_PLATFORM, modsig)
297  If rc Then
298  cause = "invalid-signature"
299  status = INTEGRITY_FAIL
300  Else
301  status = INTEGRITY_PASS
304  Return rc
Caller
NameDescribe
ima_appraise_measurementma_appraise_measurement - appraise file measurement* Call evm_verifyxattr() to verify the integrity of 'security.ima'.* Assuming success, compare the xattr hash with the collected measurement.* Return 0 on success, error code otherwise