On Tue, Oct 24, 2023 at 04:55:47PM -0700, Song Liu wrote: > fsverity provides fast and reliable hash of files, namely fsverity_digest. > The digest can be used by security solutions to verify file contents. > > Add new kfunc bpf_get_fsverity_digest() so that we can access fsverity from > BPF LSM programs. This kfunc is added to fs/verity/measure.c because some > data structure used in the function is private to fsverity > (fs/verity/fsverity_private.h). > > To avoid recursion, bpf_get_fsverity_digest is only allowed in BPF LSM > programs. > > Signed-off-by: Song Liu <song@xxxxxxxxxx> Acked-by: Eric Biggers <ebiggers@xxxxxxxxxx> - Eric
