]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Add a new ioctl for the larger params struct that includes the label.
authorstevek <stevek@FreeBSD.org>
Fri, 17 May 2019 19:27:07 +0000 (19:27 +0000)
committerstevek <stevek@FreeBSD.org>
Fri, 17 May 2019 19:27:07 +0000 (19:27 +0000)
commit8a5976b33f5bfb644fb7fa00f24806c85678aca4
tree63104af1c2f08f225dd08be6d3a7e219501733a7
parenta19d3aa40b40a19925607dd7db245dc90487d150
Add a new ioctl for the larger params struct that includes the label.

We need to make the find_veriexec_file() function available publicly, so
rename it to mac_veriexec_metadata_find_file_info() and make it non-static.

Bump the version of the veriexec device interface so user space will know
the labelized version of fingerprint loading is available.

Approved by: sjg
Obtained from: Juniper Networks, Inc.
Differential Revision: https://reviews.freebsd.org/D20295
sys/dev/veriexec/veriexec_ioctl.h
sys/dev/veriexec/verified_exec.c
sys/security/mac_veriexec/mac_veriexec.h
sys/security/mac_veriexec/mac_veriexec_internal.h
sys/security/mac_veriexec/veriexec_metadata.c