summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_main.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* ima: re-evaluate files on privileged mounted filesystemsMimi Zohar2018-03-231-2/+11
* IMA: Support using new creds in appraisal policyMatthew Garrett2018-03-231-10/+32
* iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw}Goffredo Baroncelli2018-02-011-1/+1
* Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2018-01-311-26/+66
|\
| * ima: Use i_version only when filesystem supports itSascha Hauer2017-12-181-1/+2
| * ima: log message to module appraisal errorBruno E. O. Meneguele2017-12-181-1/+3
| * ima: pass filename to ima_rdwr_violation_check()Roberto Sassu2017-12-181-3/+3
| * ima: support new "hash" and "dont_hash" policy actionsMimi Zohar2017-12-181-0/+12
| * ima: re-introduce own integrity cache lockDmitry Kasatkin2017-12-111-22/+48
* | IMA: switch IMA over to new i_version APIJeff Layton2018-01-291-1/+2
* | ima: Use i_version only when filesystem supports itSascha Hauer2017-12-131-1/+2
|/
* ima: check signature enforcement against cmdline param instead of CONFIGBruno E. O. Meneguele2017-11-081-3/+3
* ima: fix hash algorithm initializationBoshi Wang2017-11-081-0/+4
* integrity: use kernel_read_file_from_path() to read x509 certsChristoph Hellwig2017-11-081-0/+4
* ima: always measure and audit files in policyMimi Zohar2017-11-081-5/+4
* ima: allow to check MAY_APPENDLans Zhang2017-01-271-3/+3
* ima: fix ima_d_path() possible race with renameMimi Zohar2017-01-271-3/+5
* ima: store the builtin/custom template definitions in a listMimi Zohar2016-12-201-0/+1
* ima: use file_dentry()Miklos Szeredi2016-09-161-1/+1
* ima: change integrity cache to store measured pcrEric Richter2016-06-301-1/+6
* ima: include pcr for each measurement log entryEric Richter2016-06-301-1/+1
* ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-301-1/+2
* ima: add support for creating files using the mknodat syscallMimi Zohar2016-05-011-1/+24
* ima: measure and appraise the IMA policy itselfMimi Zohar2016-02-211-0/+1
* ima: support for kexec image and initramfsMimi Zohar2016-02-211-6/+9
* module: replace copy_module_from_fd with kernel versionMimi Zohar2016-02-211-22/+13
* security: define kernel_read_file hookMimi Zohar2016-02-211-0/+16
* firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar2016-02-211-11/+10
* ima: define a new hook to measure and appraise a file already in memoryMimi Zohar2016-02-211-8/+37
* ima: use "ima_hooks" enum as function argumentMimi Zohar2016-02-181-7/+7
* ima: separate 'security.ima' reading functionality from collectDmitry Kasatkin2016-02-181-4/+7
* wrappers for ->i_mutex accessAl Viro2016-01-231-4/+4
* ima: pass iint to ima_add_violation()Roberto Sassu2015-05-211-2/+3
* ima: use path names cacheDmitry Kasatkin2014-10-071-1/+2
* ima: check ima_policy_flag in the ima_file_free() hookDmitry Kasatkin2014-10-071-1/+1
* ima: detect violations for mmaped filesRoberto Sassu2014-09-181-4/+5
* ima: fix race condition on ima_rdwr_violation_check and process_measurementRoberto Sassu2014-09-181-21/+33
* ima: added ima_policy_flag variableRoberto Sassu2014-09-171-3/+5
* ima: move keyring initialization to ima_init()Dmitry Kasatkin2014-09-171-8/+2
* ima: remove usage of filename parameterDmitry Kasatkin2014-09-091-11/+8
* ima: remove unnecessary extra variableDmitry Kasatkin2014-09-091-4/+5
* ima: simplify conditional statement to improve performanceDmitry Kasatkin2014-09-091-4/+2
* ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin2014-09-091-8/+8
* ima: provide flag to identify new empty filesDmitry Kasatkin2014-09-081-5/+7
* ima: add support for measuring and appraising firmwareMimi Zohar2014-07-251-0/+11
* ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar2014-07-171-2/+8
* ima: delay template descriptor lookup until useDmitry Kasatkin2014-07-171-1/+2
* ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin2014-07-171-4/+0
* ima: check inode integrity cache in violation checkDmitry Kasatkin2014-06-121-2/+7
* ima: prevent unnecessary policy checkingDmitry Kasatkin2014-06-121-9/+4