Lines Matching refs:policy
80 static bool supported_iv_ino_lblk_policy(const struct fscrypt_policy_v2 *policy, in supported_iv_ino_lblk_policy() argument
95 if (policy->contents_encryption_mode != FSCRYPT_MODE_AES_256_XTS) { in supported_iv_ino_lblk_policy()
130 static bool fscrypt_supported_v1_policy(const struct fscrypt_policy_v1 *policy, in fscrypt_supported_v1_policy() argument
133 if (!fscrypt_valid_enc_modes(policy->contents_encryption_mode, in fscrypt_supported_v1_policy()
134 policy->filenames_encryption_mode)) { in fscrypt_supported_v1_policy()
137 policy->contents_encryption_mode, in fscrypt_supported_v1_policy()
138 policy->filenames_encryption_mode); in fscrypt_supported_v1_policy()
142 if (policy->flags & ~(FSCRYPT_POLICY_FLAGS_PAD_MASK | in fscrypt_supported_v1_policy()
145 policy->flags); in fscrypt_supported_v1_policy()
149 if ((policy->flags & FSCRYPT_POLICY_FLAG_DIRECT_KEY) && in fscrypt_supported_v1_policy()
150 !supported_direct_key_modes(inode, policy->contents_encryption_mode, in fscrypt_supported_v1_policy()
151 policy->filenames_encryption_mode)) in fscrypt_supported_v1_policy()
164 static bool fscrypt_supported_v2_policy(const struct fscrypt_policy_v2 *policy, in fscrypt_supported_v2_policy() argument
169 if (!fscrypt_valid_enc_modes(policy->contents_encryption_mode, in fscrypt_supported_v2_policy()
170 policy->filenames_encryption_mode)) { in fscrypt_supported_v2_policy()
173 policy->contents_encryption_mode, in fscrypt_supported_v2_policy()
174 policy->filenames_encryption_mode); in fscrypt_supported_v2_policy()
178 if (policy->flags & ~(FSCRYPT_POLICY_FLAGS_PAD_MASK | in fscrypt_supported_v2_policy()
183 policy->flags); in fscrypt_supported_v2_policy()
187 count += !!(policy->flags & FSCRYPT_POLICY_FLAG_DIRECT_KEY); in fscrypt_supported_v2_policy()
188 count += !!(policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_64); in fscrypt_supported_v2_policy()
189 count += !!(policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32); in fscrypt_supported_v2_policy()
192 policy->flags); in fscrypt_supported_v2_policy()
196 if ((policy->flags & FSCRYPT_POLICY_FLAG_DIRECT_KEY) && in fscrypt_supported_v2_policy()
197 !supported_direct_key_modes(inode, policy->contents_encryption_mode, in fscrypt_supported_v2_policy()
198 policy->filenames_encryption_mode)) in fscrypt_supported_v2_policy()
201 if ((policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_64) && in fscrypt_supported_v2_policy()
202 !supported_iv_ino_lblk_policy(policy, inode, "IV_INO_LBLK_64", in fscrypt_supported_v2_policy()
212 if ((policy->flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32) && in fscrypt_supported_v2_policy()
213 !supported_iv_ino_lblk_policy(policy, inode, "IV_INO_LBLK_32", in fscrypt_supported_v2_policy()
217 if (memchr_inv(policy->__reserved, 0, sizeof(policy->__reserved))) { in fscrypt_supported_v2_policy()
268 const struct fscrypt_policy_v1 *policy = &policy_u->v1; in fscrypt_new_context() local
273 policy->contents_encryption_mode; in fscrypt_new_context()
275 policy->filenames_encryption_mode; in fscrypt_new_context()
276 ctx->flags = policy->flags; in fscrypt_new_context()
278 policy->master_key_descriptor, in fscrypt_new_context()
284 const struct fscrypt_policy_v2 *policy = &policy_u->v2; in fscrypt_new_context() local
289 policy->contents_encryption_mode; in fscrypt_new_context()
291 policy->filenames_encryption_mode; in fscrypt_new_context()
292 ctx->flags = policy->flags; in fscrypt_new_context()
294 policy->master_key_identifier, in fscrypt_new_context()
330 struct fscrypt_policy_v1 *policy = &policy_u->v1; in fscrypt_policy_from_context() local
332 policy->version = FSCRYPT_POLICY_V1; in fscrypt_policy_from_context()
333 policy->contents_encryption_mode = in fscrypt_policy_from_context()
335 policy->filenames_encryption_mode = in fscrypt_policy_from_context()
337 policy->flags = ctx->flags; in fscrypt_policy_from_context()
338 memcpy(policy->master_key_descriptor, in fscrypt_policy_from_context()
340 sizeof(policy->master_key_descriptor)); in fscrypt_policy_from_context()
345 struct fscrypt_policy_v2 *policy = &policy_u->v2; in fscrypt_policy_from_context() local
347 policy->version = FSCRYPT_POLICY_V2; in fscrypt_policy_from_context()
348 policy->contents_encryption_mode = in fscrypt_policy_from_context()
350 policy->filenames_encryption_mode = in fscrypt_policy_from_context()
352 policy->flags = ctx->flags; in fscrypt_policy_from_context()
353 memcpy(policy->__reserved, ctx->__reserved, in fscrypt_policy_from_context()
354 sizeof(policy->__reserved)); in fscrypt_policy_from_context()
355 memcpy(policy->master_key_identifier, in fscrypt_policy_from_context()
357 sizeof(policy->master_key_identifier)); in fscrypt_policy_from_context()
366 static int fscrypt_get_policy(struct inode *inode, union fscrypt_policy *policy) in fscrypt_get_policy() argument
375 *policy = ci->ci_policy; in fscrypt_get_policy()
386 return fscrypt_policy_from_context(policy, &ctx, ret); in fscrypt_get_policy()
390 const union fscrypt_policy *policy) in set_encryption_policy() argument
397 if (!fscrypt_supported_policy(policy, inode)) in set_encryption_policy()
400 switch (policy->version) { in set_encryption_policy()
418 policy->v2.master_key_identifier); in set_encryption_policy()
421 if (policy->v2.flags & FSCRYPT_POLICY_FLAG_IV_INO_LBLK_32) in set_encryption_policy()
431 ctxsize = fscrypt_new_context(&ctx, policy, nonce); in set_encryption_policy()
438 union fscrypt_policy policy; in fscrypt_ioctl_set_policy() local
445 if (get_user(policy.version, (const u8 __user *)arg)) in fscrypt_ioctl_set_policy()
448 size = fscrypt_policy_size(&policy); in fscrypt_ioctl_set_policy()
463 version = policy.version; in fscrypt_ioctl_set_policy()
464 if (copy_from_user(&policy, arg, size)) in fscrypt_ioctl_set_policy()
466 policy.version = version; in fscrypt_ioctl_set_policy()
486 ret = set_encryption_policy(inode, &policy); in fscrypt_ioctl_set_policy()
488 (ret == 0 && !fscrypt_policies_equal(&policy, in fscrypt_ioctl_set_policy()
504 union fscrypt_policy policy; in fscrypt_ioctl_get_policy() local
507 err = fscrypt_get_policy(file_inode(filp), &policy); in fscrypt_ioctl_get_policy()
511 if (policy.version != FSCRYPT_POLICY_V1) in fscrypt_ioctl_get_policy()
514 if (copy_to_user(arg, &policy, sizeof(policy.v1))) in fscrypt_ioctl_get_policy()
524 union fscrypt_policy *policy = (union fscrypt_policy *)&arg.policy; in fscrypt_ioctl_get_policy_ex() local
531 offsetof(typeof(arg), policy)); in fscrypt_ioctl_get_policy_ex()
532 BUILD_BUG_ON(sizeof(arg.policy) != sizeof(*policy)); in fscrypt_ioctl_get_policy_ex()
534 err = fscrypt_get_policy(file_inode(filp), policy); in fscrypt_ioctl_get_policy_ex()
537 policy_size = fscrypt_policy_size(policy); in fscrypt_ioctl_get_policy_ex()
728 union fscrypt_policy *policy = NULL; in fscrypt_set_test_dummy_encryption() local
748 policy = kzalloc(sizeof(*policy), GFP_KERNEL); in fscrypt_set_test_dummy_encryption()
749 if (!policy) { in fscrypt_set_test_dummy_encryption()
758 policy->version = version; in fscrypt_set_test_dummy_encryption()
759 switch (policy->version) { in fscrypt_set_test_dummy_encryption()
761 policy->v1.contents_encryption_mode = FSCRYPT_MODE_AES_256_XTS; in fscrypt_set_test_dummy_encryption()
762 policy->v1.filenames_encryption_mode = FSCRYPT_MODE_AES_256_CTS; in fscrypt_set_test_dummy_encryption()
763 memcpy(policy->v1.master_key_descriptor, key_spec.u.descriptor, in fscrypt_set_test_dummy_encryption()
767 policy->v2.contents_encryption_mode = FSCRYPT_MODE_AES_256_XTS; in fscrypt_set_test_dummy_encryption()
768 policy->v2.filenames_encryption_mode = FSCRYPT_MODE_AES_256_CTS; in fscrypt_set_test_dummy_encryption()
769 memcpy(policy->v2.master_key_identifier, key_spec.u.identifier, in fscrypt_set_test_dummy_encryption()
778 if (dummy_policy->policy) { in fscrypt_set_test_dummy_encryption()
779 if (fscrypt_policies_equal(policy, dummy_policy->policy)) in fscrypt_set_test_dummy_encryption()
785 dummy_policy->policy = policy; in fscrypt_set_test_dummy_encryption()
786 policy = NULL; in fscrypt_set_test_dummy_encryption()
789 kfree(policy); in fscrypt_set_test_dummy_encryption()
806 const union fscrypt_policy *policy = fscrypt_get_dummy_policy(sb); in fscrypt_show_test_dummy_encryption() local
809 if (!policy) in fscrypt_show_test_dummy_encryption()
812 vers = policy->version; in fscrypt_show_test_dummy_encryption()