summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima (follow)
Commit message (Expand)AuthorAgeFilesLines
...
| * | powerpc: Move ima buffer fields to struct kimageLakshmi Ramasubramanian2021-03-081-6/+2
| |/
* / lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore2021-03-222-8/+8
|/
* Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2021-02-241-3/+2
|\
| * certs: Fix blacklist flag type confusionDavid Howells2021-01-211-3/+2
* | Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2021-02-237-46/+73
|\ \
| * | ima: handle idmapped mountsChristian Brauner2021-01-247-40/+68
| * | xattr: handle idmapped mountsTycho Andersen2021-01-241-4/+4
| |/
* | Merge branch 'ima-kexec-fixes' into next-integrityMimi Zohar2021-02-101-0/+3
|\ \
| * | ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian2021-02-101-0/+2
| * | ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian2021-02-101-0/+1
| |/
* | IMA: Measure kernel version in early bootRaphael Gianotti2021-01-271-0/+5
* | IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian2021-01-151-0/+12
* | IMA: extend critical data hook to limit the measurement based on a labelTushar Sugandhi2021-01-151-3/+5
* | IMA: limit critical data measurement based on a labelTushar Sugandhi2021-01-151-3/+34
* | IMA: add policy rule to measure critical dataTushar Sugandhi2021-01-151-4/+25
* | IMA: define a hook to measure kernel integrity critical dataTushar Sugandhi2021-01-153-1/+26
* | IMA: add support to measure buffer data hashTushar Sugandhi2021-01-155-9/+30
* | IMA: generalize keyring specific measurement constructsTushar Sugandhi2021-01-154-26/+35
|/
* Merge tag 'efi_updates_for_v5.11' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2020-12-242-0/+77
|\
| * ima: generalize x86/EFI arch glue for other EFI architecturesChester Lin2020-11-062-0/+77
* | Merge tag 'integrity-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-12-166-37/+54
|\ \
| * | ima: Don't modify file descriptor mode on the flyRoberto Sassu2020-11-291-15/+5
| * | ima: select ima-buf template for buffer measurementLakshmi Ramasubramanian2020-11-204-16/+37
| * | ima: defer arch_ima_get_secureboot() call to IMA init timeArd Biesheuvel2020-11-022-6/+12
* | | ima: Implement ima_inode_hashKP Singh2020-11-261-24/+54
|/ /
* / ima: Replace zero-length array with flexible-array memberGustavo A. R. Silva2020-10-291-1/+1
|/
* Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-10-165-64/+143
|\
| * ima: Fix NULL pointer dereference in ima_file_hashKP Singh2020-09-161-0/+10
| * ima: Remove semicolon at the end of ima_get_binary_runtime_size()Roberto Sassu2020-09-151-1/+1
| * ima: Don't ignore errors from crypto_shash_update()Roberto Sassu2020-09-151-0/+2
| * ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar2020-09-151-5/+4
| * ima: limit secure boot feedback scope for appraiseBruno Meneguele2020-09-101-9/+16
| * integrity: invalid kernel parameters feedbackBruno Meneguele2020-09-093-4/+13
| * ima: add check for enforced appraise optionBruno Meneguele2020-09-091-0/+2
| * ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks2020-08-311-2/+4
| * ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks2020-08-311-45/+93
* | fs/kernel_file_read: Add "offset" arg for partial readsKees Cook2020-10-051-1/+2
* | IMA: Add support for file reads without contentsScott Branden2020-10-051-6/+16
* | LSM: Add "contents" flag to kernel_read_file hookKees Cook2020-10-051-1/+9
* | firmware_loader: Use security_post_load_data()Kees Cook2020-10-051-10/+10
* | LSM: Introduce kernel_post_load_data() hookKees Cook2020-10-051-1/+23
* | fs/kernel_read_file: Add file_size output argumentKees Cook2020-10-051-1/+1
* | fs/kernel_read_file: Switch buffer size arg to size_tKees Cook2020-10-051-1/+1
* | fs/kernel_read_file: Remove redundant size argumentKees Cook2020-10-051-2/+4
* | fs/kernel_read_file: Split into separate include fileScott Branden2020-10-053-0/+3
* | fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook2020-10-052-5/+3
* | treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2020-08-243-7/+7
|/
* Merge tag 'for-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris...Linus Torvalds2020-08-114-4/+4
|\
| * Replace HTTP links with HTTPS ones: securityAlexander A. Klimov2020-08-064-4/+4
* | ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtimeBruno Meneguele2020-07-212-1/+7