summaryrefslogtreecommitdiff
path: root/security/integrity
AgeCommit message (Expand)Author
2021-06-03evm: Don't return an error in evm_write_xattrs() if audit is not enabledRoberto Sassu
2021-06-03ima: Define new template evm-sigRoberto Sassu
2021-06-02ima: Define new template fields xattrnames, xattrlengths and xattrvaluesRoberto Sassu
2021-06-01evm: Verify portable signatures against all protected xattrsRoberto Sassu
2021-06-01ima: Define new template field imodeRoberto Sassu
2021-06-01ima: Define new template fields iuid and igidRoberto Sassu
2021-06-01ima: Add ima_show_template_uint() template library functionRoberto Sassu
2021-06-01ima: Don't remove security.ima if file must not be appraisedRoberto Sassu
2021-06-01ima: Introduce template field evmsig and write to field sig as fallbackRoberto Sassu
2021-06-01ima: Allow imasig requirement to be satisfied by EVM portable signaturesRoberto Sassu
2021-06-01evm: Allow setxattr() and setattr() for unmodified metadataRoberto Sassu
2021-05-21evm: Pass user namespace to set/remove xattr hooksRoberto Sassu
2021-05-21evm: Allow xattr/attr operations for portable signaturesRoberto Sassu
2021-05-21evm: Introduce evm_hmac_disabled() to safely ignore verification errorsRoberto Sassu
2021-05-21evm: Introduce evm_revalidate_status()Roberto Sassu
2021-05-21evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loadedRoberto Sassu
2021-05-21evm: Load EVM key in ima_load_x509() to avoid appraisalRoberto Sassu
2021-05-21evm: Execute evm_inode_init_security() only when an HMAC key is loadedRoberto Sassu
2021-05-20evm: fix writing <securityfs>/evm overflowMimi Zohar
2021-05-01Merge tag 'integrity-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2021-04-28Merge tag 'devicetree-for-5.13' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2021-04-27Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2021-04-26Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds
2021-04-26Merge tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2021-04-20ima: Fix fall-through warnings for ClangGustavo A. R. Silva
2021-04-09integrity: Add declarations to init_once void arguments.Jiele Zhao
2021-04-09ima: Fix function name error in comment.Jiele Zhao
2021-04-09ima: enable loading of build time generated key on .ima keyringNayna Jain
2021-03-26ima: Support EC keys for signature verificationStefan Berger
2021-03-24ima: Fix the error code for restoring the PCR valueLi Huafei
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore
2021-03-22ima: without an IMA policy loaded, return quicklyMimi Zohar
2021-03-22integrity: double check iint_cache was initializedMimi Zohar
2021-03-11integrity: Load mokx variables into the blacklist keyringEric Snowberg
2021-03-11certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg
2021-03-08powerpc: Move arch independent ima kexec functions to drivers/of/kexec.cLakshmi Ramasubramanian
2021-03-08powerpc: Move ima buffer fields to struct kimageLakshmi Ramasubramanian
2021-02-23Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2021-02-23Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds
2021-02-12integrity: Make function integrity_add_key() staticWei Yongjun
2021-02-10Merge branch 'ima-kexec-fixes' into next-integrityMimi Zohar
2021-02-10ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian
2021-02-10ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian
2021-01-26IMA: Measure kernel version in early bootRaphael Gianotti
2021-01-24ima: handle idmapped mountsChristian Brauner
2021-01-24fs: make helpers idmap mount awareChristian Brauner
2021-01-24xattr: handle idmapped mountsTycho Andersen
2021-01-21certs: Fix blacklist flag type confusionDavid Howells
2021-01-14IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian
2021-01-14IMA: extend critical data hook to limit the measurement based on a labelTushar Sugandhi