03a713b7ab
Verifiers framework provides core file verification functionality which can be used by various security mechanisms, e.g., UEFI secure boot, TPM, PGP signature verification, etc. The patch contains PGP code changes and probably they should be extracted to separate patch for the sake of clarity. Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com> Signed-off-by: Daniel Kiper <daniel.kiper@oracle.com> Reviewed-by: Ross Philipson <ross.philipson@oracle.com>
65 lines
1.9 KiB
C
65 lines
1.9 KiB
C
/*
|
|
* GRUB -- GRand Unified Bootloader
|
|
* Copyright (C) 2017 Free Software Foundation, Inc.
|
|
*
|
|
* GRUB is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GRUB is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with GRUB. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include <grub/file.h>
|
|
#include <grub/list.h>
|
|
|
|
enum grub_verify_flags
|
|
{
|
|
GRUB_VERIFY_FLAGS_SKIP_VERIFICATION = 1,
|
|
GRUB_VERIFY_FLAGS_SINGLE_CHUNK = 2
|
|
};
|
|
|
|
struct grub_file_verifier
|
|
{
|
|
struct grub_file_verifier *next;
|
|
struct grub_file_verifier **prev;
|
|
|
|
const char *name;
|
|
|
|
/*
|
|
* Check if file needs to be verified and set up context.
|
|
* init/read/fini is structured in the same way as hash interface.
|
|
*/
|
|
grub_err_t (*init) (grub_file_t io, enum grub_file_type type,
|
|
void **context, enum grub_verify_flags *flags);
|
|
|
|
/*
|
|
* Right now we pass the whole file in one call but it may
|
|
* change in the future. If you insist on single buffer you
|
|
* need to set GRUB_VERIFY_FLAGS_SINGLE_CHUNK in verify_flags.
|
|
*/
|
|
grub_err_t (*write) (void *context, void *buf, grub_size_t size);
|
|
|
|
grub_err_t (*fini) (void *context);
|
|
void (*close) (void *context);
|
|
};
|
|
|
|
extern struct grub_file_verifier *grub_file_verifiers;
|
|
|
|
static inline void
|
|
grub_verifier_register (struct grub_file_verifier *ver)
|
|
{
|
|
grub_list_push (GRUB_AS_LIST_P (&grub_file_verifiers), GRUB_AS_LIST (ver));
|
|
}
|
|
|
|
static inline void
|
|
grub_verifier_unregister (struct grub_file_verifier *ver)
|
|
{
|
|
grub_list_remove (GRUB_AS_LIST (ver));
|
|
}
|