Changeset View
Changeset View
Standalone View
Standalone View
head/sys/dev/veriexec/veriexec_ioctl.h
Show All 40 Lines | |||||
struct verified_exec_params { | struct verified_exec_params { | ||||
unsigned char flags; | unsigned char flags; | ||||
char fp_type[VERIEXEC_FPTYPELEN]; /* type of fingerprint */ | char fp_type[VERIEXEC_FPTYPELEN]; /* type of fingerprint */ | ||||
char file[MAXPATHLEN]; | char file[MAXPATHLEN]; | ||||
unsigned char fingerprint[MAXFINGERPRINTLEN]; | unsigned char fingerprint[MAXFINGERPRINTLEN]; | ||||
}; | }; | ||||
struct verified_exec_label_params { | |||||
struct verified_exec_params params; | |||||
char label[MAXLABELLEN]; | |||||
}; | |||||
#define VERIEXEC_LOAD _IOW('S', 0x1, struct verified_exec_params) | #define VERIEXEC_LOAD _IOW('S', 0x1, struct verified_exec_params) | ||||
#define VERIEXEC_ACTIVE _IO('S', 0x2) /* start checking */ | #define VERIEXEC_ACTIVE _IO('S', 0x2) /* start checking */ | ||||
#define VERIEXEC_ENFORCE _IO('S', 0x3) /* fail exec */ | #define VERIEXEC_ENFORCE _IO('S', 0x3) /* fail exec */ | ||||
#define VERIEXEC_LOCK _IO('S', 0x4) /* don't allow new sigs */ | #define VERIEXEC_LOCK _IO('S', 0x4) /* don't allow new sigs */ | ||||
#define VERIEXEC_DEBUG_ON _IOWR('S', 0x5, int) /* set/get debug level */ | #define VERIEXEC_DEBUG_ON _IOWR('S', 0x5, int) /* set/get debug level */ | ||||
#define VERIEXEC_DEBUG_OFF _IO('S', 0x6) /* reset debug */ | #define VERIEXEC_DEBUG_OFF _IO('S', 0x6) /* reset debug */ | ||||
#define VERIEXEC_GETSTATE _IOR('S', 0x7, int) /* get state */ | #define VERIEXEC_GETSTATE _IOR('S', 0x7, int) /* get state */ | ||||
#define VERIEXEC_SIGNED_LOAD _IOW('S', 0x8, struct verified_exec_params) | #define VERIEXEC_SIGNED_LOAD _IOW('S', 0x8, struct verified_exec_params) | ||||
#define VERIEXEC_GETVERSION _IOR('S', 0x9, int) /* get version */ | #define VERIEXEC_GETVERSION _IOR('S', 0x9, int) /* get version */ | ||||
#define VERIEXEC_LABEL_LOAD _IOW('S', 0xa, struct verified_exec_label_params) | |||||
#define _PATH_DEV_VERIEXEC _PATH_DEV "veriexec" | #define _PATH_DEV_VERIEXEC _PATH_DEV "veriexec" | ||||
#endif | #endif |