evm: permit mode bits to be updated
[linux-2.6.git] / include / linux / integrity.h
1 /*
2  * Copyright (C) 2009 IBM Corporation
3  * Author: Mimi Zohar <zohar@us.ibm.com>
4  *
5  * This program is free software; you can redistribute it and/or modify
6  * it under the terms of the GNU General Public License as published by
7  * the Free Software Foundation, version 2 of the License.
8  */
9
10 #ifndef _LINUX_INTEGRITY_H
11 #define _LINUX_INTEGRITY_H
12
13 #include <linux/fs.h>
14
15 enum integrity_status {
16         INTEGRITY_PASS = 0,
17         INTEGRITY_FAIL,
18         INTEGRITY_NOLABEL,
19         INTEGRITY_NOXATTRS,
20         INTEGRITY_UNKNOWN,
21 };
22
23 /* List of EVM protected security xattrs */
24 #ifdef CONFIG_INTEGRITY
25 extern int integrity_inode_alloc(struct inode *inode);
26 extern void integrity_inode_free(struct inode *inode);
27
28 #else
29 static inline int integrity_inode_alloc(struct inode *inode)
30 {
31         return 0;
32 }
33
34 static inline void integrity_inode_free(struct inode *inode)
35 {
36         return;
37 }
38 #endif /* CONFIG_INTEGRITY_H */
39 #endif /* _LINUX_INTEGRITY_H */