diff options
| author | gVisor bot <gvisor-bot@google.com> | 2020-09-08 15:52:01 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-09-08 15:54:21 -0700 |
| commit | 360f1535c761650657d406bf68f15498118d8222 (patch) | |
| tree | c96e539de81e9143320abb53d4941265b6de3110 /pkg/abi | |
| parent | 682c0edcdcdfbf26be5d0d6efa2319f6f5259df2 (diff) | |
Implement ioctl with enable verity
ioctl with FS_IOC_ENABLE_VERITY is added to verity file system to enable
a file as verity file. For a file, a Merkle tree is built with its data.
For a directory, a Merkle tree is built with the root hashes of its
children.
PiperOrigin-RevId: 330604368
Diffstat (limited to 'pkg/abi')
| -rw-r--r-- | pkg/abi/linux/ioctl.go | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/pkg/abi/linux/ioctl.go b/pkg/abi/linux/ioctl.go index d6dbedc3e..a4fe7501d 100644 --- a/pkg/abi/linux/ioctl.go +++ b/pkg/abi/linux/ioctl.go @@ -113,6 +113,11 @@ const ( _IOC_DIRSHIFT = _IOC_SIZESHIFT + _IOC_SIZEBITS ) +// Constants from uapi/linux/fsverity.h. +const ( + FS_IOC_ENABLE_VERITY = 1082156677 +) + // IOC outputs the result of _IOC macro in asm-generic/ioctl.h. func IOC(dir, typ, nr, size uint32) uint32 { return uint32(dir)<<_IOC_DIRSHIFT | typ<<_IOC_TYPESHIFT | nr<<_IOC_NRSHIFT | size<<_IOC_SIZESHIFT |