summaryrefslogtreecommitdiffstats
path: root/security/integrity
AgeCommit message (Expand)AuthorLines
2019-12-12IMA: Define an IMA hook to measure keysLakshmi Ramasubramanian-0/+53
2019-12-12IMA: Add KEY_CHECK func to measure keysLakshmi Ramasubramanian-1/+4
2019-12-12IMA: Check IMA policy flagLakshmi Ramasubramanian-0/+3
2019-12-12ima: avoid appraise error for hash calc interruptPatrick Callaghan-1/+3
2019-11-29x86/efi: remove unused variablesYueHaibing-5/+0
2019-11-13powerpc: Load firmware trusted keys/hashes into kernel keyringNayna Jain-1/+108
2019-11-13x86/efi: move common keyring handler functions to new fileNayna Jain-67/+115
2019-11-12ima: Check against blacklisted hashes for files with modsigNayna Jain-6/+60
2019-11-12ima: Make process_buffer_measurement() genericNayna Jain-18/+43
2019-10-05integrity: remove pointless subdir-$(CONFIG_...)Masahiro Yamada-2/+0
2019-10-05integrity: remove unneeded, broken attempt to add -fshort-wcharMasahiro Yamada-1/+0
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds-3/+55
2019-08-29ima: ima_api: Use struct_size() in kzalloc()Gustavo A. R. Silva-2/+2
2019-08-29ima: use struct_size() in kzalloc()Gustavo A. R. Silva-3/+2
2019-08-28ima: Fix use after free in ima_read_modsig()Thiago Jung Bauermann-1/+2
2019-08-19kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett-1/+53
2019-08-19kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac-2/+2
2019-08-05ima: fix freeing ongoing ahash_requestSascha Hauer-0/+5
2019-08-05ima: always return negative code for errorSascha Hauer-1/+4
2019-08-05ima: Store the measurement again when appraising a modsigThiago Jung Bauermann-7/+47
2019-08-05ima: Define ima-modsig templateThiago Jung Bauermann-6/+156
2019-08-05ima: Collect modsigThiago Jung Bauermann-5/+60
2019-08-05ima: Implement support for module-style appended signaturesThiago Jung Bauermann-23/+209
2019-08-05ima: Factor xattr_verify() out of ima_appraise_measurement()Thiago Jung Bauermann-60/+81
2019-08-05ima: Add modsig appraise_type option for module-style appended signaturesThiago Jung Bauermann-2/+62
2019-08-05integrity: Select CONFIG_KEYS instead of depending on itThiago Jung Bauermann-1/+1
2019-08-01ima: initialize the "template" field with the default templateMimi Zohar-2/+4
2019-07-10Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds-39/+29
2019-07-08Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-67/+363
2019-07-08Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-29/+39
2019-07-08Merge tag 'keys-namespace-20190627' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds-2/+2
2019-06-30integrity: Introduce struct evm_xattrThiago Jung Bauermann-7/+14
2019-06-30ima: Update MAX_TEMPLATE_NAME_LEN to fit largest reasonable definitionThiago Jung Bauermann-1/+7
2019-06-30IMA: Define a new template field bufPrakhar Srivastava-1/+33
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells-29/+39
2019-06-26keys: Add a 'recurse' flag for keyring searchesDavid Howells-2/+2
2019-06-24IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava-0/+81
2019-06-19IMA: support for per policy rule template formatsMatthew Garrett-27/+76
2019-06-17integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven-2/+3
2019-06-14ima: Use designated initializers for struct ima_event_dataThiago Jung Bauermann-6/+11
2019-06-14ima: use the lsm policy update notifierJanne Karhunen-20/+106
2019-06-14x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICYNayna Jain-1/+2
2019-06-14ima: Make arch_policy_entry staticYueHaibing-1/+1
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner-110/+23
2019-06-04ima: prevent a file already mmap'ed write to be mmap'ed executeMimi Zohar-2/+30
2019-05-31Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds-12/+19
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner-5/+1
2019-05-29ima: show rules with IMA_INMASK correctlyRoberto Sassu-9/+12
2019-05-29evm: check hash algorithm passed to init_desc()Roberto Sassu-0/+3
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner-0/+4