Lines Matching defs:modsig
413 * modsig_verify - verify modsig signature
419 static int modsig_verify(enum ima_hooks func, const struct modsig *modsig,
424 rc = integrity_modsig_verify(INTEGRITY_KEYRING_IMA, modsig);
428 modsig);
448 const struct modsig *modsig, int pcr)
458 if (iint->flags & IMA_MODSIG_ALLOWED && modsig) {
459 ima_get_modsig_digest(modsig, &hash_algo, &digest, &digestsize);
495 int xattr_len, const struct modsig *modsig)
504 bool try_modsig = iint->flags & IMA_MODSIG_ALLOWED && modsig;
506 /* If not appraising a modsig, we need an xattr. */
520 /* If reading the xattr failed and there's no modsig, error out. */
552 /* It's fine not to have xattrs when using a modsig. */
575 * If we have a modsig and either no imasig or the imasig's key isn't
576 * known, then try verifying the modsig.
581 rc = modsig_verify(func, modsig, &status, &cause);