Return to integrity_checker.h CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libstrongswan / utils

Annotation of embedaddon/strongswan/src/libstrongswan/utils/integrity_checker.h, revision 1.1

1.1     ! misho       1: /*
        !             2:  * Copyright (C) 2009 Martin Willi
        !             3:  * HSR Hochschule fuer Technik Rapperswil
        !             4:  *
        !             5:  * This program is free software; you can redistribute it and/or modify it
        !             6:  * under the terms of the GNU General Public License as published by the
        !             7:  * Free Software Foundation; either version 2 of the License, or (at your
        !             8:  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
        !             9:  *
        !            10:  * This program is distributed in the hope that it will be useful, but
        !            11:  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
        !            12:  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
        !            13:  * for more details.
        !            14:  */
        !            15: 
        !            16: /**
        !            17:  * @defgroup integrity_checker integrity_checker
        !            18:  * @{ @ingroup utils
        !            19:  */
        !            20: 
        !            21: #ifndef INTEGRITY_CHECKER_H_
        !            22: #define INTEGRITY_CHECKER_H_
        !            23: 
        !            24: #include "utils.h"
        !            25: 
        !            26: typedef struct integrity_checker_t integrity_checker_t;
        !            27: typedef struct integrity_checksum_t integrity_checksum_t;
        !            28: 
        !            29: /**
        !            30:  * Struct to hold a precalculated checksum, implemented in the checksum library.
        !            31:  */
        !            32: struct integrity_checksum_t {
        !            33:        /* name of the checksum */
        !            34:        char *name;
        !            35:        /* size in bytes of the file on disk */
        !            36:        size_t file_len;
        !            37:        /* checksum of the file on disk */
        !            38:        uint32_t file;
        !            39:        /* size in bytes of executable segment in memory */
        !            40:        size_t segment_len;
        !            41:        /* checksum of the executable segment in memory */
        !            42:        uint32_t segment;
        !            43: };
        !            44: 
        !            45: /**
        !            46:  * Code integrity checker to detect non-malicious file manipulation.
        !            47:  *
        !            48:  * The integrity checker reads the checksums from a separate library
        !            49:  * libchecksum.so to compare the checksums.
        !            50:  */
        !            51: struct integrity_checker_t {
        !            52: 
        !            53:        /**
        !            54:         * Check the integrity of a file on disk.
        !            55:         *
        !            56:         * @param name          name to lookup checksum
        !            57:         * @param file          path to file
        !            58:         * @return                      TRUE if integrity tested successfully
        !            59:         */
        !            60:        bool (*check_file)(integrity_checker_t *this, char *name, char *file);
        !            61: 
        !            62:        /**
        !            63:         * Build the integrity checksum of a file on disk.
        !            64:         *
        !            65:         * @param file          path to file
        !            66:         * @param len           return length in bytes of file
        !            67:         * @return                      checksum, 0 on error
        !            68:         */
        !            69:        uint32_t (*build_file)(integrity_checker_t *this, char *file, size_t *len);
        !            70: 
        !            71:        /**
        !            72:         * Check the integrity of the code segment in memory.
        !            73:         *
        !            74:         * @param name          name to lookup checksum
        !            75:         * @param sym           a symbol in the segment to check
        !            76:         * @return                      TRUE if integrity tested successfully
        !            77:         */
        !            78:        bool (*check_segment)(integrity_checker_t *this, char *name, void *sym);
        !            79:        /**
        !            80:         * Build the integrity checksum of a code segment in memory.
        !            81:         *
        !            82:         * @param sym           a symbol in the segment to check
        !            83:         * @param len           return length in bytes of code segment in memory
        !            84:         * @return                      checksum, 0 on error
        !            85:         */
        !            86:        uint32_t (*build_segment)(integrity_checker_t *this, void *sym, size_t *len);
        !            87: 
        !            88:        /**
        !            89:         * Check both, on disk file integrity and loaded segment.
        !            90:         *
        !            91:         * @param name          name to lookup checksum
        !            92:         * @param sym           a symbol to look up library and segment
        !            93:         * @return                      TRUE if integrity tested successfully
        !            94:         */
        !            95:        bool (*check)(integrity_checker_t *this, char *name, void *sym);
        !            96: 
        !            97:        /**
        !            98:         * Destroy a integrity_checker_t.
        !            99:         */
        !           100:        void (*destroy)(integrity_checker_t *this);
        !           101: };
        !           102: 
        !           103: /**
        !           104:  * Create a integrity_checker instance.
        !           105:  *
        !           106:  * @param checksum_library             library containing checksums
        !           107:  */
        !           108: integrity_checker_t *integrity_checker_create(char *checksum_library);
        !           109: 
        !           110: #endif /** INTEGRITY_CHECKER_H_ @}*/