summaryrefslogtreecommitdiffstats
path: root/security/integrity/digsig.c
AgeCommit message (Expand)AuthorLines
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds-1/+1
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook-1/+1
2024-02-16integrity: eliminate unnecessary "Problem loading X.509 certificate" msgCoiby Xu-1/+2
2023-08-17integrity: check whether imputed trust is enabledNayna Jain-1/+1
2023-08-17integrity: Enforce digitalSignature usage in the ima and evm keyringsEric Snowberg-2/+2
2023-04-24integrity: machine keyring CA configurationEric Snowberg-2/+6
2022-11-16integrity: Fix memory leakage in keyring allocation error pathGUO Zihua-1/+5
2022-05-05ima: support fs-verity file digest based version 3 signaturesMimi Zohar-1/+2
2022-03-08integrity: Only use machine keyring when uefi_check_trust_mok_keys is trueEric Snowberg-1/+1
2022-03-08KEYS: store reference to machine keyringEric Snowberg-0/+2
2022-03-08integrity: Introduce a Linux keyring called machineEric Snowberg-2/+11
2021-04-09ima: enable loading of build time generated key on .ima keyringNayna Jain-0/+2
2021-02-12integrity: Make function integrity_add_key() staticWei Yongjun-2/+2
2020-10-05fs/kernel_file_read: Add "offset" arg for partial readsKees Cook-1/+1
2020-10-05fs/kernel_read_file: Add file_size output argumentKees Cook-1/+1
2020-10-05fs/kernel_read_file: Switch buffer size arg to size_tKees Cook-1/+1
2020-10-05fs/kernel_read_file: Remove redundant size argumentKees Cook-2/+3
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden-0/+1
2020-10-05fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook-1/+1
2020-02-28integrity: Remove duplicate pr_fmt definitionsTushar Sugandhi-2/+0
2019-08-05ima: Implement support for module-style appended signaturesThiago Jung Bauermann-9/+34
2019-07-10Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds-13/+18
2019-07-08Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-2/+3
2019-07-08Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-18/+13
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells-18/+13
2019-06-17integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven-2/+3
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner-5/+1
2019-02-04integrity, KEYS: add a reference to platform keyringKairui Song-0/+3
2018-12-17integrity: Remove references to module keyringThiago Jung Bauermann-1/+0
2018-12-12integrity: Load certs to the platform keyringNayna Jain-24/+43
2018-12-12integrity: Define a trusted platform keyringNayna Jain-15/+32
2018-10-10security/integrity: remove unnecessary 'init_keyring' variableEric Biggers-7/+1
2018-10-10security/integrity: constify some read-only dataEric Biggers-1/+1
2018-02-22integrity/security: fix digsig.c build error with header fileRandy Dunlap-0/+1
2017-11-08integrity: use kernel_read_file_from_path() to read x509 certsChristoph Hellwig-5/+9
2017-04-04KEYS: Use structure to capture key restriction function and dataMat Martineau-1/+8
2016-11-13security/integrity: Harden against malformed xattrsSeth Forshee-1/+1
2016-04-11IMA: Use the the system trusted keyrings instead of .ima_mokDavid Howells-26/+4
2016-04-11KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTEDDavid Howells-2/+1
2016-04-11KEYS: Move the point of trust determination to __key_link()David Howells-1/+32
2016-04-11KEYS: Add a facility to restrict new links into a keyringDavid Howells-4/+3
2015-11-23integrity: define '.evm' as a builtin 'trusted' keyringDmitry Kasatkin-2/+12
2015-10-09integrity: prevent loading untrusted certificates on the IMA trusted keyringDmitry Kasatkin-1/+1
2015-05-21integrity: add validity checks for 'path' parameterDmitry Kasatkin-1/+1
2014-11-17integrity: provide a function to load x509 certificate from the kernelDmitry Kasatkin-1/+35
2014-10-07integrity: add missing '__init' keyword for integrity_init_keyring()Dmitry Kasatkin-1/+1
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar-0/+28
2013-11-23Revert "ima: define '_ima' as a builtin 'trusted' keyring"Linus Torvalds-29/+1
2013-10-31ima: define '_ima' as a builtin 'trusted' keyringMimi Zohar-1/+29
2013-10-25ima: pass full xattr with the signatureDmitry Kasatkin-2/+3