fs/crypto/policy.c

3  * Encryption policy functions for per-file encryption support.
20  * fscrypt_policies_equal() - check whether two encryption policies are the same
93 	 * IV_INO_LBLK_* with other encryption modes arises.  in supported_iv_ino_lblk_policy()
136 			     "Unsupported encryption modes (contents %d, filenames %d)",  in fscrypt_supported_v1_policy()
144 		fscrypt_warn(inode, "Unsupported encryption flags (0x%02x)",  in fscrypt_supported_v1_policy()
172 			     "Unsupported encryption modes (contents %d, filenames %d)",  in fscrypt_supported_v2_policy()
179 		fscrypt_warn(inode, "Unsupported encryption flags (0x%02x)",  in fscrypt_supported_v2_policy()
188 		fscrypt_warn(inode, "Mutually exclusive encryption flags (0x%02x)",  in fscrypt_supported_v2_policy()
215 		fscrypt_warn(inode, "Reserved bits set in encryption policy");  in fscrypt_supported_v2_policy()
223  * fscrypt_supported_policy() - check whether an encryption policy is supported
224  * @policy_u: the encryption policy
227  * Given an encryption policy, check whether all its encryption modes and other
253  * encryption policy.  @nonce must be a new random nonce.
362 /* Retrieve an inode's encryption policy */
400 		 * The original encryption policy version provided no way of  in set_encryption_policy()
404 		 * encryption policy version fixes this and also implies use of  in set_encryption_policy()
410 …pr_warn_once("%s (pid %d) is setting deprecated v1 encryption policy; recommend upgrading to v2.\n…  in set_encryption_policy()
419 …pr_warn_once("%s (pid %d) is setting an IV_INO_LBLK_32 encryption policy.  This should only be use…  in set_encryption_policy()
487 		/* The file already uses a different encryption policy. */  in fscrypt_ioctl_set_policy()
549 /* FS_IOC_GET_ENCRYPTION_NONCE: retrieve file's encryption nonce for testing */
569  * fscrypt_has_permitted_context() - is a file's encryption policy permitted
581  * same encryption policy.  The pre-access check is needed to detect potentially
607 	 * encryption policy.  Compare the fscrypt_info structs if the keys are  in fscrypt_has_permitted_context()
640  * Return the encryption policy that new files in the directory will inherit, or
704  * Handle the test_dummy_encryption mount option by creating a dummy encryption
706  * encryption key to the filesystem.  If the @dummy_policy is already set, then