summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2014-11-17integrity: provide a hook to load keys when rootfs is readyDmitry Kasatkin3-1/+22
2014-11-17ima: load x509 certificate from the kernelDmitry Kasatkin4-2/+44
2014-11-17integrity: provide a function to load x509 certificate from the kernelDmitry Kasatkin2-1/+37
2014-11-17integrity: define a new function integrity_read_file()Dmitry Kasatkin3-32/+85
2014-10-13ima: added support for new kernel cmdline parameter ima_template_fmtRoberto Sassu3-20/+52
2014-10-13ima: allocate field pointers array on demand in template_desc_init_fields()Roberto Sassu1-21/+13
2014-10-13ima: don't allocate a copy of template_fmt in template_desc_init_fields()Roberto Sassu1-13/+17
2014-10-13ima: display template format in meas. list if template name length is zeroRoberto Sassu2-5/+15
2014-10-13ima: added error messages to template-related functionsRoberto Sassu1-5/+17
2014-10-11ima: use atomic bit operations to protect policy update interfaceDmitry Kasatkin2-28/+18
2014-10-11ima: ignore empty and with whitespaces policy linesDmitry Kasatkin1-1/+2
2014-10-11ima: no need to allocate entry for commentDmitry Kasatkin1-8/+6
2014-10-11ima: report policy load statusDmitry Kasatkin1-0/+2
2014-10-07ima: use path names cacheDmitry Kasatkin2-3/+4
2014-10-07evm: skip replacing EVM signature with HMAC on read-only filesystemDmitry Kasatkin1-3/+8
2014-10-07integrity: add missing '__init' keyword for integrity_init_keyring()Dmitry Kasatkin2-2/+2
2014-10-07ima: check ima_policy_flag in the ima_file_free() hookDmitry Kasatkin3-7/+1
2014-10-06integrity: do zero padding of the key idDmitry Kasatkin1-1/+1
2014-10-06KEYS: output last portion of fingerprint in /proc/keysDmitry Kasatkin1-5/+5
2014-10-06KEYS: strip 'id:' from ca_keyidDmitry Kasatkin1-1/+1
2014-10-06KEYS: use swapped SKID for performing partial matchingDmitry Kasatkin2-9/+9
2014-10-06KEYS: Restore partial ID matching functionality for asymmetric keysDmitry Kasatkin6-25/+81
2014-10-03X.509: If available, use the raw subjKeyId to form the key descriptionDavid Howells3-2/+11
2014-10-03KEYS: handle error code encoded in pointerDmitry Kasatkin1-2/+2
2014-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris7-48/+95
2014-10-01Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris5-83/+115
2014-10-01Merge commit 'v3.16' into nextJames Morris467-2301/+4180
2014-09-22selinux: normalize audit log formattingRichard Guy Briggs1-6/+8
2014-09-22selinux: cleanup error reporting in selinux_nlmsg_perm()Richard Guy Briggs1-4/+3
2014-09-22Merge tag 'keys-next-20140922' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris35-338/+690
2014-09-22KEYS: Check hex2bin()'s return when generating an asymmetric key IDDavid Howells1-7/+8
2014-09-18ima: detect violations for mmaped filesRoberto Sassu2-9/+5
2014-09-18ima: fix race condition on ima_rdwr_violation_check and process_measurementRoberto Sassu1-21/+33
2014-09-18Merge branch 'smack-for-3.18' of git://git.gitorious.org/smack-next/kernel in...James Morris5-274/+520
2014-09-17ima: added ima_policy_flag variableRoberto Sassu4-5/+34
2014-09-17ima: return an error code from ima_add_boot_aggregate()Roberto Sassu1-6/+15
2014-09-17ima: provide 'ima_appraise=log' kernel optionDmitry Kasatkin3-3/+6
2014-09-17ima: move keyring initialization to ima_init()Dmitry Kasatkin2-8/+6
2014-09-16Merge tag 'keys-pkcs7-20140916' into keys-nextDavid Howells34-305/+649
2014-09-16PKCS#7: Handle PKCS#7 messages that contain no X.509 certsDavid Howells2-17/+47
2014-09-16PKCS#7: Better handling of unsupported cryptoDavid Howells5-16/+74
2014-09-16KEYS: Overhaul key identification when searching for asymmetric keysDavid Howells10-186/+198
2014-09-16KEYS: Implement binary asymmetric key ID handlingDavid Howells3-0/+131
2014-09-16KEYS: Update the keyrings documentation for match changesDavid Howells1-13/+52
2014-09-16KEYS: Make the key matching functions return boolDavid Howells6-16/+18
2014-09-16KEYS: Remove key_type::match in favour of overriding default by match_preparseDavid Howells19-45/+31
2014-09-16KEYS: Remove key_type::def_lookup_typeDavid Howells6-14/+5
2014-09-16KEYS: Preparse match dataDavid Howells11-51/+129
2014-09-16Provide a binary to hex conversion functionDavid Howells2-0/+17
2014-09-16Merge tag 'keys-next-fixes-20140916' into keys-nextDavid Howells2-5/+5