mirror of
https://github.com/systemd/systemd.git
synced 2026-06-30 19:57:29 +00:00
97db6fbfc7
This will be used in an upcoming commit to move global command line argument variables in sysupdate into its `Context` struct.
128 lines
7.8 KiB
C
128 lines
7.8 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
#include "conf-parser-forward.h"
|
|
#include "dissect-image.h"
|
|
#include "shared-forward.h"
|
|
#include "gpt.h"
|
|
|
|
typedef enum PartitionPolicyFlags {
|
|
/* Not all policy flags really make sense on all partition types, see comments. But even if they
|
|
* don't make sense we'll parse them anyway, because maybe one day we'll add them for more partition
|
|
* types, too. Moreover, we allow configuring a "default" policy for all partition types for which no
|
|
* explicit policy is specified. It's useful if we can use policy flags in there and apply this
|
|
* default policy gracefully even to partition types where they don't really make too much sense
|
|
* on. Example: a default policy of "verity+encrypted" certainly makes sense, but for /home/
|
|
* partitions this gracefully degrades to "encrypted" (as we do not have a concept of verity for
|
|
* /home/), and so on. */
|
|
PARTITION_POLICY_VERITY = 1 << 0, /* must exist, activate with verity (only applies to root/usr partitions) */
|
|
PARTITION_POLICY_SIGNED = 1 << 1, /* must exist, activate with signed verity (only applies to root/usr partitions) */
|
|
PARTITION_POLICY_ENCRYPTED = 1 << 2, /* must exist, activate with LUKS encryption (applies to any data partition, but not to verity/signature partitions */
|
|
PARTITION_POLICY_ENCRYPTEDWITHINTEGRITY = 1 << 3, /* same as PARTITION_POLICY_ENCRYPTED but also requires integrity checking */
|
|
PARTITION_POLICY_UNPROTECTED = 1 << 4, /* must exist, activate without encryption/verity */
|
|
PARTITION_POLICY_UNUSED = 1 << 5, /* must exist, don't use */
|
|
PARTITION_POLICY_ABSENT = 1 << 6, /* must not exist */
|
|
PARTITION_POLICY_OPEN = PARTITION_POLICY_VERITY|PARTITION_POLICY_SIGNED|PARTITION_POLICY_ENCRYPTED|PARTITION_POLICY_ENCRYPTEDWITHINTEGRITY|
|
|
PARTITION_POLICY_UNPROTECTED|PARTITION_POLICY_UNUSED|PARTITION_POLICY_ABSENT,
|
|
PARTITION_POLICY_IGNORE = PARTITION_POLICY_UNUSED|PARTITION_POLICY_ABSENT,
|
|
_PARTITION_POLICY_USE_MASK = PARTITION_POLICY_OPEN,
|
|
|
|
PARTITION_POLICY_READ_ONLY_OFF = 1 << 7, /* State of GPT partition flag "read-only" must be on */
|
|
PARTITION_POLICY_READ_ONLY_ON = 1 << 8,
|
|
_PARTITION_POLICY_READ_ONLY_MASK = PARTITION_POLICY_READ_ONLY_OFF|PARTITION_POLICY_READ_ONLY_ON,
|
|
PARTITION_POLICY_GROWFS_OFF = 1 << 9, /* State of GPT partition flag "growfs" must be on */
|
|
PARTITION_POLICY_GROWFS_ON = 1 << 10,
|
|
_PARTITION_POLICY_GROWFS_MASK = PARTITION_POLICY_GROWFS_OFF|PARTITION_POLICY_GROWFS_ON,
|
|
_PARTITION_POLICY_PFLAGS_MASK = _PARTITION_POLICY_READ_ONLY_MASK|_PARTITION_POLICY_GROWFS_MASK,
|
|
|
|
_PARTITION_POLICY_MASK = _PARTITION_POLICY_USE_MASK|_PARTITION_POLICY_READ_ONLY_MASK|_PARTITION_POLICY_GROWFS_MASK,
|
|
|
|
/* Policies can impose filesystem type requirements on images. These flags translate to the literal
|
|
* fstype name of each filesystem. */
|
|
PARTITION_POLICY_BTRFS = 1 << 11,
|
|
PARTITION_POLICY_EROFS = 1 << 12,
|
|
PARTITION_POLICY_EXT4 = 1 << 13,
|
|
PARTITION_POLICY_F2FS = 1 << 14,
|
|
PARTITION_POLICY_SQUASHFS = 1 << 15,
|
|
PARTITION_POLICY_VFAT = 1 << 16,
|
|
PARTITION_POLICY_XFS = 1 << 17,
|
|
_PARTITION_POLICY_FSTYPE_MASK = PARTITION_POLICY_BTRFS|PARTITION_POLICY_EROFS|PARTITION_POLICY_EXT4|
|
|
PARTITION_POLICY_F2FS|PARTITION_POLICY_SQUASHFS|
|
|
PARTITION_POLICY_VFAT|PARTITION_POLICY_XFS,
|
|
|
|
_PARTITION_POLICY_FLAGS_INVALID = -EINVAL,
|
|
_PARTITION_POLICY_FLAGS_ERRNO_MAX = -ERRNO_MAX, /* Ensure the whole errno range fits into this enum */
|
|
} PartitionPolicyFlags;
|
|
|
|
assert_cc((_PARTITION_POLICY_USE_MASK | _PARTITION_POLICY_PFLAGS_MASK) >= 0); /* ensure flags don't collide with errno range */
|
|
|
|
typedef struct PartitionPolicy {
|
|
PartitionDesignator designator;
|
|
PartitionPolicyFlags flags;
|
|
} PartitionPolicy;
|
|
|
|
typedef struct ImagePolicy {
|
|
PartitionPolicyFlags default_flags; /* for any designator not listed in the list below */
|
|
size_t n_policies;
|
|
PartitionPolicy policies[]; /* sorted by designator, hence suitable for binary search */
|
|
} ImagePolicy;
|
|
|
|
/* Default policies for various use cases */
|
|
extern const ImagePolicy image_policy_allow;
|
|
extern const ImagePolicy image_policy_deny;
|
|
extern const ImagePolicy image_policy_ignore;
|
|
extern const ImagePolicy image_policy_sysext; /* No verity required */
|
|
extern const ImagePolicy image_policy_sysext_strict; /* Signed verity required */
|
|
extern const ImagePolicy image_policy_confext; /* No verity required */
|
|
extern const ImagePolicy image_policy_confext_strict; /* Signed verity required */
|
|
extern const ImagePolicy image_policy_container;
|
|
extern const ImagePolicy image_policy_service;
|
|
extern const ImagePolicy image_policy_host;
|
|
|
|
PartitionPolicyFlags image_policy_get(const ImagePolicy *policy, PartitionDesignator designator);
|
|
PartitionPolicyFlags image_policy_get_exhaustively(const ImagePolicy *policy, PartitionDesignator designator);
|
|
|
|
/* We want that the NULL image policy means "everything" allowed, hence use these simple accessors to make
|
|
* NULL policies work reasonably */
|
|
static inline PartitionPolicyFlags image_policy_default(const ImagePolicy *policy) {
|
|
return policy ? policy->default_flags : PARTITION_POLICY_OPEN;
|
|
}
|
|
|
|
static inline size_t image_policy_n_entries(const ImagePolicy *policy) {
|
|
return policy ? policy->n_policies : 0;
|
|
}
|
|
|
|
PartitionPolicyFlags partition_policy_flags_extend(PartitionPolicyFlags flags);
|
|
PartitionPolicyFlags partition_policy_flags_reduce(PartitionPolicyFlags flags);
|
|
|
|
PartitionPolicyFlags partition_policy_flags_from_string(const char *s, bool graceful);
|
|
int partition_policy_flags_to_string(PartitionPolicyFlags flags, bool simplify, char **ret);
|
|
|
|
int partition_policy_determine_fstype(const ImagePolicy *policy, PartitionDesignator designator, bool *ret_encrypted, char **ret_fstype);
|
|
|
|
int image_policy_from_string(const char *s, bool graceful, ImagePolicy **ret);
|
|
int image_policy_to_string(const ImagePolicy *policy, bool simplify, char **ret);
|
|
|
|
/* Recognizes three special policies by equivalence */
|
|
bool image_policy_equiv_ignore(const ImagePolicy *policy);
|
|
bool image_policy_equiv_allow(const ImagePolicy *policy);
|
|
bool image_policy_equiv_deny(const ImagePolicy *policy);
|
|
|
|
bool image_policy_equal(const ImagePolicy *a, const ImagePolicy *b); /* checks if defined the same way, i.e. has literally the same ruleset */
|
|
int image_policy_equivalent(const ImagePolicy *a, const ImagePolicy *b); /* checks if the outcome is the same, i.e. for all partitions results in the same decisions. */
|
|
|
|
int image_policy_intersect(const ImagePolicy *a, const ImagePolicy *b, ImagePolicy **ret);
|
|
int image_policy_union(const ImagePolicy *a, const ImagePolicy *b, ImagePolicy **ret);
|
|
|
|
ImagePolicy* image_policy_new_from_dissected(const DissectedImage *image, const VeritySettings *verity);
|
|
ImagePolicy* image_policy_free(ImagePolicy *p);
|
|
|
|
DEFINE_TRIVIAL_CLEANUP_FUNC(ImagePolicy*, image_policy_free);
|
|
|
|
ImagePolicy* image_policy_copy(const ImagePolicy *p);
|
|
|
|
CONFIG_PARSER_PROTOTYPE(config_parse_image_policy);
|
|
int parse_image_policy_argument(const char *s, ImagePolicy **policy);
|
|
|
|
int image_policy_ignore_designators(const ImagePolicy *p, const PartitionDesignator table[], size_t n_table, ImagePolicy **ret);
|