Luca Boccassi 579941899d ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower version ...

When loading policies in userspace we want a recognizable error when an
update attempts to use an old policy, as that is an error that needs
to be treated differently from an invalid policy. Use -ESTALE as it is
clear enough for an update mechanism.

Signed-off-by: Luca Boccassi <bluca@debian.org>
Reviewed-by: Serge Hallyn <serge@hallyn.com>
Signed-off-by: Fan Wu <wufan@kernel.org>

2024-10-17 11:37:13 -07:00

..

.gitignore

scripts: add boot policy generation program

2024-08-20 14:03:39 -04:00

audit.c

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

audit.h

ipe: add permissive toggle

2024-08-20 14:02:27 -04:00

digest.c

ipe: add support for dm-verity as a trust provider

2024-08-20 14:02:45 -04:00

digest.h

ipe: add support for dm-verity as a trust provider

2024-08-20 14:02:45 -04:00

eval.c

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

eval.h

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

fs.c

scripts: add boot policy generation program

2024-08-20 14:03:39 -04:00

fs.h

ipe: add userspace interface

2024-08-20 14:02:15 -04:00

hooks.c

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

hooks.h

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

ipe.c

ipe: Remove duplicated include in ipe.c

2024-08-22 12:24:10 -04:00

ipe.h

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

Kconfig

ipe: kunit test for parser

2024-08-20 14:03:43 -04:00

Makefile

ipe: kunit test for parser

2024-08-20 14:03:43 -04:00

policy_fs.c

ipe: add userspace interface

2024-08-20 14:02:15 -04:00

policy_parser.c

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00

policy_parser.h

ipe: add policy parser

2024-08-20 14:01:00 -04:00

policy_tests.c

ipe: Add missing terminator to list of unit tests

2024-09-23 15:53:37 -04:00

policy.c

ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower version

2024-10-17 11:37:13 -07:00

policy.h

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00