Keycloak

1
/*
2
 * Copyright 2023 Red Hat, Inc. and/or its affiliates
3
 * and other contributors as indicated by the @author tags.
4
 *
5
 * Licensed under the Apache License, Version 2.0 (the "License");
6
 * you may not use this file except in compliance with the License.
7
 * You may obtain a copy of the License at
8
 *
9
 * http://www.apache.org/licenses/LICENSE-2.0
10
 *
11
 * Unless required by applicable law or agreed to in writing, software
12
 * distributed under the License is distributed on an "AS IS" BASIS,
13
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
 * See the License for the specific language governing permissions and
15
 * limitations under the License.
16
 */
17

18
/*
19
 * https://github.com/torvalds/linux/blob/master/crypto/fips.c
20
 * https://pointer-overloading.blogspot.com/2013/09/linux-creating-entry-in-proc-file.html
21
 */
22

23
#include <linux/module.h>
24
#include <linux/sysctl.h>
25
#include <linux/version.h>
26

27
int fips_enabled = 1;
28

29
static struct ctl_table crypto_sysctl_table[] = {
30
	{
31
		.procname	= "fips_enabled",
32
		.data		= &fips_enabled,
33
		.maxlen		= sizeof(int),
34
		.mode		= 0444,
35
		.proc_handler	= proc_dointvec
36
	},
37
        {}
38
};
39
static struct ctl_table crypto_dir_table[] = {
40
	{
41
		.procname       = "crypto",
42
		.mode           = 0555,
43
#if (LINUX_VERSION_CODE < KERNEL_VERSION(6, 4, 0))
44
		.child          = crypto_sysctl_table
45
#endif
46
	},
47
	{}
48
};
49

50
static struct ctl_table_header *crypto_sysctls;
51

52
static void crypto_proc_fips_init(void)
53
{
54
#if (LINUX_VERSION_CODE < KERNEL_VERSION(6, 4, 0))
55
	crypto_sysctls = register_sysctl_table(crypto_dir_table);
56
#else
57
	crypto_sysctls = register_sysctl(crypto_dir_table->procname, crypto_sysctl_table);
58
#endif
59
}
60

61
static void crypto_proc_fips_exit(void)
62
{
63
	unregister_sysctl_table(crypto_sysctls);
64
}
65

66
static int __init fips_init(void)
67
{
68
	crypto_proc_fips_init();
69
	return 0;
70
}
71

72
static void __exit fips_exit(void)
73
{
74
	crypto_proc_fips_exit();
75
}
76

77
MODULE_LICENSE("GPL");
78
subsys_initcall(fips_init);
79
module_exit(fips_exit);
80