summaryrefslogtreecommitdiffstats
path: root/security/integrity
AgeCommit message (Expand)AuthorFilesLines
2018-07-18evm: Don't deadlock if a crypto algorithm is unavailableMatthew Garrett1-1/+2
2018-07-18integrity: silence warning when CONFIG_SECURITYFS is not enabledSudeep Holla1-3/+6
2018-07-18ima: Differentiate auditing policy rules from "audit" actionsStefan Berger1-2/+2
2018-07-18ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not setStefan Berger3-1/+21
2018-07-18ima: Use audit_log_format() rather than audit_log_string()Stefan Berger2-7/+2
2018-07-18ima: Call audit_log_string() rather than logging it untrustedStefan Berger1-1/+1
2018-07-16ima: based on policy warn about loading firmware (pre-allocated buffer)Mimi Zohar1-0/+8
2018-07-16module: replace the existing LSM hook in init_moduleMimi Zohar1-13/+10
2018-07-16ima: add build time policyMimi Zohar2-3/+101
2018-07-16ima: based on policy require signed firmware (sysfs fallback)Mimi Zohar1-1/+9
2018-07-16ima: based on policy require signed kexec kernel imagesMimi Zohar3-0/+30
2018-07-12IMA: don't propagate opened through the entire thingAl Viro3-12/+12
2018-06-07Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds13-83/+362
2018-06-06Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2-2/+2
2018-06-01EVM: unlock on error path in evm_read_xattrs()Dan Carpenter1-1/+3
2018-05-31EVM: prevent array underflow in evm_write_xattrs()Dan Carpenter1-1/+1
2018-05-31EVM: Fix null dereference on xattr when xattr fails to allocateColin Ian King1-2/+4
2018-05-31EVM: fix memory leak of temporary buffer 'temp'Colin Ian King1-0/+2
2018-05-31IMA: use list_splice_tail_init_rcu() instead of its open coded variantPetko Manolov1-15/+2
2018-05-31ima: use match_string() helperYisheng Xie1-7/+4
2018-05-22ima: fix updating the ima_appraise flagMimi Zohar1-9/+19
2018-05-22ima: based on policy verify firmware signatures (pre-allocated buffer)Mimi Zohar1-0/+1
2018-05-22ima: define a new policy condition based on the filesystem nameMimi Zohar1-1/+24
2018-05-18EVM: Allow runtime modification of the set of verified xattrsMatthew Garrett4-4/+188
2018-05-18EVM: turn evm_config_xattrnames into a listMatthew Garrett3-39/+57
2018-05-17integrity: Add an integrity directory in securityfsMatthew Garrett4-4/+52
2018-05-17ima: Remove unused variable ima_initializedPetr Vorel2-6/+2
2018-05-17ima: Unify loggingPetr Vorel3-2/+9
2018-05-17ima: Reflect correct permissions for policyPetr Vorel1-0/+2
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs2-2/+2
2018-05-03evm: Don't update hmacs in user ns mountsSeth Forshee1-1/+2
2018-03-25ima: Fallback to the builtin hash algorithmPetr Vorel2-0/+15
2018-03-25ima: Add smackfs to the default appraise/measure listMartin Townsend1-0/+2
2018-03-25evm: check for remount ro in progress before writingSascha Hauer1-2/+6
2018-03-25ima: Improvements in ima_appraise_measurement()Thiago Jung Bauermann1-13/+22
2018-03-25ima: Simplify ima_eventsig_init()Thiago Jung Bauermann1-8/+3
2018-03-25integrity: Remove unused macro IMA_ACTION_RULE_FLAGSThiago Jung Bauermann1-1/+0
2018-03-25ima: drop vla in ima_audit_measurement()Tycho Andersen1-6/+10
2018-03-25ima: Fix Kconfig to select TPM 2.0 CRB interfaceJiandi An1-0/+1
2018-03-23evm: Constify *integrity_status_msg[]Hernán Gonzalez1-1/+1
2018-03-23evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.cHernán Gonzalez3-4/+3
2018-03-23ima: fail signature verification based on policyMimi Zohar4-6/+14
2018-03-23ima: clear IMA_HASHMimi Zohar1-1/+1
2018-03-23ima: re-evaluate files on privileged mounted filesystemsMimi Zohar1-2/+11
2018-03-23ima: fail file signature verification on non-init mounted filesystemsMimi Zohar1-1/+14
2018-03-23IMA: Support using new creds in appraisal policyMatthew Garrett7-29/+79
2018-02-22integrity/security: fix digsig.c build error with header fileRandy Dunlap1-0/+1
2018-02-07Merge tag 'iversion-v4.16-2' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-1/+1
2018-02-02ima: re-initialize iint->atomic_flagsMimi Zohar1-0/+1
2018-02-01iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw}Goffredo Baroncelli1-1/+1