projects
/
platform
/
kernel
/
linux-starfive.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
ima: rework CONFIG_IMA dependency block
2023-09-27
Arnd Bergmann
ima: rework CONFIG_IMA dependency block
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-09-26
Oleksandr Tymoshenko
ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-08-07
Wenyu Liu
kexec_lock: Replace kexec_mutex() by kexec_lock() in...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-08-01
Coiby Xu
ima: require signed IMA policy when UEFI secure boot...
Suggested-by:
Mimi Zohar
<zohar@linux.ibm.com>
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-08-01
Eric Snowberg
integrity: Always reference the blacklist keyring with...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-08-01
Nayna Jain
ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-06-06
Roberto Sassu
ima: Fix build warnings
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-06-06
Roberto Sassu
evm: Fix build warnings
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-06-05
Roberto Sassu
evm: Complete description of evm_inode_setattr()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-06-01
Tianjia Zhang
integrity: Fix possible multiple allocation in integrity_ino...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-05-23
Jeff Layton
IMA: use vfs_getattr_nosec to get the i_version
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-03-15
Randy Dunlap
IMA: allow/fix UML builds
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-01-31
Roberto Sassu
ima: Introduce MMAP_CHECK_REQPROT hook
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-01-31
Roberto Sassu
ima: Align ima_file_mmap() parameters with mmap_file...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-01-31
Xiu Jianfeng
evm: call dump_security_xattr() in all cases to remove...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-01-18
Randy Dunlap
ima: fix ima_delete_rules() kernel-doc warning
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-01-18
Matt Bobrowski
ima: return IMA digest value only when IMA_COLLECTED...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2023-01-18
Matt Bobrowski
ima: fix error handling logic when file measurement...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-28
Tianjia Zhang
ima: Fix hash dependency to correct algorithm
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-16
Xiu Jianfeng
ima: Fix misuse of dereference of pointer in template_desc_i...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-16
GUO Zihua
integrity: Fix memory leakage in keyring allocation...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-03
Roberto Sassu
ima: Fix memory leak in __ima_inode_hash()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-02
GUO Zihua
ima: Handle -ESTALE returned by ima_filter_rule_match()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-02
GUO Zihua
ima: Simplify ima_lsm_copy_rule
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-02
Huaxin Lu
ima: Fix a potential NULL pointer access in ima_restore_meas...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-11-01
Aditya Garg
efi: Add iMac Pro 2017 to uefi skip cert quirk
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-10-19
Nikolaus Voss
KEYS: encrypted: fix key instantiation with user-provided...
Reviewed-by:
Mimi Zohar
<zohar@linux.ibm.com>
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-09-30
Orlando Chamberlain
efi: Correct Macmini DMI match in uefi cert quirk
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-08-23
Mimi Zohar
ima: fix blocking of security.ima xattrs of unsupported...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-26
Mimi Zohar
Merge remote-tracking branch 'linux-integrity/kexec...
commit
|
commitdiff
|
tree
2022-07-15
Michal Suchanek
kexec, KEYS, s390: Make use of built-in and secondary...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-15
Coiby Xu
arm64: kexec_file: use more system keyrings to verify...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-15
Coiby Xu
kexec, KEYS: make the code in bzImage64_verify_sig...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-15
Coiby Xu
kexec: clean up arch_kexec_kernel_verify_sig
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-15
Naveen N. Rao
kexec: drop weak attribute from functions
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-15
Naveen N. Rao
kexec_file: drop weak attribute from functions
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-13
Xiu Jianfeng
evm: Use IS_ENABLED to initialize .enabled
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-13
Jianglei Nie
ima: Fix potential memory leak in ima_init_crypto()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-13
Coiby Xu
ima: force signature verification when CONFIG_KEXEC_SIG...
Reported-and-suggested-by:
Mimi Zohar
<zohar@linux.ibm.com>
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-07
Huaxin Lu
ima: Fix a potential integer overflow in ima_appraise_measur...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-07-07
Mimi Zohar
ima: fix violation measurement list record
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-06-15
Xiu Jianfeng
Revert "evm: Fix memleak in init_desc"
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-16
Stefan Berger
integrity: Fix sparse warnings in keyring_handler
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-16
Stefan Berger
evm: Clean up some variables
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-16
Stefan Berger
evm: Return INTEGRITY_PASS for enum integrity_status...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-15
Aditya Garg
efi: Do not import certificates from UEFI Secure Boot...
Reviewed-by:
Mimi Zohar
<zohar@linux.ibm.com>
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-12
Mimi Zohar
Merge branch 'next-integrity.fsverity-v9' into next...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-12
Mimi Zohar
fsverity: update the documentation
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-05
Mimi Zohar
ima: support fs-verity file digest based version 3...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-05
Mimi Zohar
ima: permit fsverity's file digests in the IMA measurement...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-05
Mimi Zohar
ima: define a new template field named 'd-ngv2' and...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-01
Mimi Zohar
fs-verity: define a function to return the integrity...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-01
Mimi Zohar
ima: use IMA default hash algorithm for integrity violations
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-05-01
Mimi Zohar
ima: fix 'd-ng' comments and documentation
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-04-07
GUO Zihua
ima: remove the IMA_TEMPLATE Kconfig option
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-04-04
Colin Ian King
ima: remove redundant initialization of pointer 'file'.
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-03-01
Mimi Zohar
MAINTAINERS: add missing security/integrity/platform_certs
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-22
Randy Dunlap
EVM: fix the evm= __setup handler return value
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-22
Yael Tzur
KEYS: encrypted: Instantiate key with user-provided...
Reviewed-by:
Mimi Zohar
<zohar@linux.ibm.com>
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-15
Mimi Zohar
ima: define ima_max_digest_data struct without a flexible...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-15
Mimi Zohar
ima: rename IMA_ACTION_FLAGS to IMA_NONACTION_FLAGS
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-15
Stefan Berger
ima: Return error code obtained from securityfs functions
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-15
Mimi Zohar
MAINTAINERS: add missing "security/integrity" directory
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-15
Austin Kim
ima: Fix trivial typos in the comments
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-02
Stefan Berger
ima: Do not print policy rule with inactive LSM labels
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-02
Roberto Sassu
ima: Allow template selection with ima_template[_fmt...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-02
Stefan Berger
ima: Remove ima_policy file before directory
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-02-02
Xiaoke Wang
integrity: check the return value of audit_log_start()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-01-24
Eric Biggers
ima: fix reference leak in asymmetric_verify()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-01-05
Nageswara R Sastry
selftests/kexec: Enable secureboot tests for PowerPC
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2022-01-05
Bruno Meneguele
ima: silence measurement list hexdump during kexec
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-12-31
Mimi Zohar
selftests/kexec: update searching for the Kconfig
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-12-31
Mimi Zohar
selftest/kexec: fix "ignored null byte in input" warning
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-12-24
Lee, Chun-Yi
integrity: Do not load MOK and MOKx when secure boot...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-12-24
Takashi Iwai
ima: Fix undefined arch_ima_get_secureboot() and co
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-10-28
Austin Kim
evm: mark evm_fixmode as __ro_after_init
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-10-10
Petr Vorel
ima: Use strscpy instead of strlcpy
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-10-10
Petr Vorel
ima_policy: Remove duplicate 'the' in docs comment
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-10-10
Curtis Veit
ima: add gid support
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-10-10
Alex Henrie
ima: fix uid code style problems
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-10-10
liqiong
ima: fix deadlock when traversing "ima_default_rules".
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-23
THOBY Simon
IMA: reject unknown hash algorithms in ima_get_hash_algo
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-18
Mimi Zohar
Merge branch 'restrict-digest-alg-v8' into next-integrity
commit
|
commitdiff
|
tree
2021-08-16
THOBY Simon
IMA: prevent SETXATTR_CHECK policy rules with unavailable...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-16
THOBY Simon
IMA: introduce a new policy option func=SETXATTR_CHECK
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-16
THOBY Simon
IMA: add a policy option to restrict xattr hash algorithms...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-16
THOBY Simon
IMA: add support to restrict the hash algorithms used...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-16
THOBY Simon
IMA: block writes of the security.ima xattr with unsupported...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-08-16
THOBY Simon
IMA: remove the dependency on CRYPTO_MD5
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-07-23
Mimi Zohar
Merge branch 'ima-buffer-measurement-changes-v4' into...
commit
|
commitdiff
|
tree
2021-07-23
Roberto Sassu
ima: Add digest and digest_len params to the functions...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-07-23
Roberto Sassu
ima: Return int in the functions to measure a buffer
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-07-23
Roberto Sassu
ima: Introduce ima_get_current_hash_algo()
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-07-23
Austin Kim
IMA: remove -Wmissing-prototypes warning
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-06-21
Roberto Sassu
evm: Check xattr size discrepancy between kernel and...
Suggested-by:
Mimi Zohar
<zohar@linux.ibm.com>
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-06-20
Mimi Zohar
evm: output EVM digest calculation info
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-06-11
Tushar Sugandhi
IMA: support for duplicate measurement records
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-06-11
Lakshmi Ramasubramanian
ima: Fix warning: no previous prototype for function...
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-06-10
Mimi Zohar
ima: differentiate between EVM failures in the audit log
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
2021-06-09
Gustavo A. R. Silva
ima: Fix fall-through warning for Clang
Signed-off-by:
Mimi Zohar
<zohar@linux.ibm.com>
commit
|
commitdiff
|
tree
next