- a1f9b1c integrity/ima: switch to using __kernel_read by Christoph Hellwig · 4 years, 8 months ago
- 20c59ce ima: extend boot_aggregate with kernel measurements by Maurizio Drocco · 4 years, 7 months ago
- eb492c6 ima: Replace zero-length array with flexible-array by Gustavo A. R. Silva · 4 years, 7 months ago
- 923ea16 Merge tag 'integrity-v5.8-fix' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 4235b1a ima: fix mprotect checking by Mimi Zohar · 4 years, 7 months ago
- 8b8c704 ima: Remove __init annotation from ima_pcrread() by Roberto Sassu · 4 years, 7 months ago
- 3c0ad98 Merge tag 'integrity-v5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 42413b4 ima: Directly free *entry in ima_alloc_init_template() if digests is NULL by Roberto Sassu · 4 years, 7 months ago
- 6cc7c26 ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() by Roberto Sassu · 4 years, 7 months ago
- 067a436 ima: Directly assign the ima_default_policy pointer to ima_rules by Roberto Sassu · 4 years, 7 months ago
- 8eb613c ima: verify mprotect change is consistent with mmap policy by Mimi Zohar · 4 years, 8 months ago
- 8433856 evm: Fix a small race in init_desc() by Dan Carpenter · 4 years, 8 months ago
- 0c4395f evm: Fix possible memory leak in evm_calc_hmac_or_hash() by Roberto Sassu · 4 years, 9 months ago
- b59fda4 ima: Set again build_ima_appraise variable by Krzysztof Struczynski · 4 years, 8 months ago
- 6ee2844 ima: Remove redundant policy rule set in add_rules() by Krzysztof Struczynski · 4 years, 8 months ago
- 1129d31 ima: Fix ima digest hash table key calculation by Krzysztof Struczynski · 4 years, 8 months ago
- 770f605 evm: Fix RCU list related warnings by Madhuparna Bhowmik · 4 years, 8 months ago
- 2e3a34e ima: Fix return value of ima_write_policy() by Roberto Sassu · 4 years, 8 months ago
- 53de3b0 evm: Check also if *tfm is an error pointer in init_desc() by Roberto Sassu · 4 years, 8 months ago
- 0014cc0 ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() by Roberto Sassu · 4 years, 8 months ago
- 2592677 ima: Use ima_hash_algo for collision detection in the measurement list by Roberto Sassu · 4 years, 10 months ago
- 1ea973d ima: Calculate and extend PCR with digests in ima_template_entry by Roberto Sassu · 4 years, 10 months ago
- 6d94809 ima: Allocate and initialize tfm for each PCR bank by Roberto Sassu · 4 years, 10 months ago
- aa724fe ima: Switch to dynamically allocated buffer for template digests by Roberto Sassu · 4 years, 10 months ago
- 7ca7964 ima: Store template digest directly in ima_template_entry by Roberto Sassu · 4 years, 10 months ago
- e144d6b ima: Evaluate error in init_ima() by Roberto Sassu · 4 years, 10 months ago
- 6f1a1d1 ima: Switch to ima_hash_algo for boot aggregate by Roberto Sassu · 4 years, 10 months ago
- 7f21831 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 9 months ago
- 9e2b4be ima: add a new CONFIG for loading arch-specific policies by Nayna Jain · 4 years, 10 months ago
- 555d6d7 integrity: Remove duplicate pr_fmt definitions by Tushar Sugandhi · 4 years, 11 months ago
- 72ec611 IMA: Add log statements for failure conditions by Tushar Sugandhi · 4 years, 11 months ago
- e2bf681 IMA: Update KBUILD_MODNAME for IMA files to ima by Tushar Sugandhi · 4 years, 11 months ago
- e976568 Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi into efi/core by Ingo Molnar · 4 years, 10 months ago
- 6b75d54 integrity: Check properly whether EFI GetVariable() is available by Ard Biesheuvel · 4 years, 11 months ago
- 5780b9a ima: add sm3 algorithm to hash algorithm configuration list by Tianjia Zhang · 5 years ago
- 3be54d5 efi: Only print errors about failing to get certs if EFI vars are found by Javier Martinez Canillas · 4 years, 11 months ago
- 73a0bff Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 5 years ago
- 5b3014b IMA: Defined delayed workqueue to free the queued keys by Lakshmi Ramasubramanian · 5 years ago
- 450d0fd IMA: Call workqueue functions to measure queued keys by Lakshmi Ramasubramanian · 5 years ago
- 9f81a2e IMA: Define workqueue for early boot key measurements by Lakshmi Ramasubramanian · 5 years ago
- 5c7bac9 IMA: pre-allocate buffer to hold keyrings string by Lakshmi Ramasubramanian · 5 years ago
- 483ec26 ima: ima/lsm policy rule loading logic bug fixes by Janne Karhunen · 5 years ago
- 6beea7a ima: add the ability to query the cached hash of a given file by Florent Revest · 5 years ago
- 5350ceb ima: Add a space after printing LSM rules for readability by Clay Chang · 5 years ago
- ea78979 IMA: fix measuring asymmetric keys Kconfig by Lakshmi Ramasubramanian · 5 years ago
- 2b60c0e IMA: Read keyrings= option from the IMA policy by Lakshmi Ramasubramanian · 5 years ago
- e9085e0 IMA: Add support to limit measuring keys by Lakshmi Ramasubramanian · 5 years ago
- 88e70da IMA: Define an IMA hook to measure keys by Lakshmi Ramasubramanian · 5 years ago
- 5808611 IMA: Add KEY_CHECK func to measure keys by Lakshmi Ramasubramanian · 5 years ago
- c5563ba IMA: Check IMA policy flag by Lakshmi Ramasubramanian · 5 years ago
- 96c9e1d ima: avoid appraise error for hash calc interrupt by Patrick Callaghan · 5 years ago
- c593642 treewide: Use sizeof_field() macro by Pankaj Bharadiya · 5 years ago
- 6f09019 x86/efi: remove unused variables by YueHaibing · 5 years ago
- 8220e22 powerpc: Load firmware trusted keys/hashes into kernel keyring by Nayna Jain · 5 years ago
- ad72367 x86/efi: move common keyring handler functions to new file by Nayna Jain · 5 years ago
- 273df86 ima: Check against blacklisted hashes for files with modsig by Nayna Jain · 5 years ago
- e14555e ima: Make process_buffer_measurement() generic by Nayna Jain · 5 years ago
- 7a8beb7 integrity: remove pointless subdir-$(CONFIG_...) by Masahiro Yamada · 5 years ago
- 6b190d3 integrity: remove unneeded, broken attempt to add -fshort-wchar by Masahiro Yamada · 5 years ago
- aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
- 2a7f0e5 ima: ima_api: Use struct_size() in kzalloc() by Gustavo A. R. Silva · 5 years ago
- fa5b571 ima: use struct_size() in kzalloc() by Gustavo A. R. Silva · 6 years ago
- 556d971 ima: Fix use after free in ima_read_modsig() by Thiago Jung Bauermann · 5 years ago
- 29d3c1c kexec: Allow kexec_file() with appropriate IMA policy when locked down by Matthew Garrett · 5 years ago
- 99d5cadf kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE by Jiri Bohac · 5 years ago
- 4ece312 ima: fix freeing ongoing ahash_request by Sascha Hauer · 6 years ago
- f5e1040 ima: always return negative code for error by Sascha Hauer · 6 years ago
- e509225 ima: Store the measurement again when appraising a modsig by Thiago Jung Bauermann · 6 years ago
- 3878d50 ima: Define ima-modsig template by Thiago Jung Bauermann · 6 years ago
- 1558822 ima: Collect modsig by Thiago Jung Bauermann · 6 years ago
- 39b0709 ima: Implement support for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
- a5fbeb6 ima: Factor xattr_verify() out of ima_appraise_measurement() by Thiago Jung Bauermann · 6 years ago
- 9044d62 ima: Add modsig appraise_type option for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
- cf38fed integrity: Select CONFIG_KEYS instead of depending on it by Thiago Jung Bauermann · 6 years ago
- b36f281 ima: initialize the "template" field with the default template by Mimi Zohar · 5 years ago
- 028db3e Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs" by Linus Torvalds · 5 years ago
- 8b68150 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 5 years ago
- 0f75ef6 Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 5 years ago
- c84ca91 Merge tag 'keys-namespace-20190627' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 5 years ago
- 650b29d integrity: Introduce struct evm_xattr by Thiago Jung Bauermann · 6 years ago
- 337619e ima: Update MAX_TEMPLATE_NAME_LEN to fit largest reasonable definition by Thiago Jung Bauermann · 6 years ago
- 86b4da8 IMA: Define a new template field buf by Prakhar Srivastava · 6 years ago
- 2e12256 keys: Replace uid/gid/perm permissions checking with an ACL by David Howells · 6 years ago
- dcf49db keys: Add a 'recurse' flag for keyring searches by David Howells · 6 years ago
- b093512 IMA: Define a new hook to measure the kexec boot command line arguments by Prakhar Srivastava · 6 years ago
- 19453ce0 IMA: support for per policy rule template formats by Matthew Garrett · 6 years ago
- 8c65578 integrity: Fix __integrity_init_keyring() section mismatch by Geert Uytterhoeven · 6 years ago
- e038f5f ima: Use designated initializers for struct ima_event_data by Thiago Jung Bauermann · 6 years ago
- b169424 ima: use the lsm policy update notifier by Janne Karhunen · 6 years ago
- 9e1e5d4 x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICY by Nayna Jain · 6 years ago
- 68f2529 ima: Make arch_policy_entry static by YueHaibing · 6 years ago
- b886d83 treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 by Thomas Gleixner · 6 years ago
- 2cd4737 ima: prevent a file already mmap'ed write to be mmap'ed execute by Mimi Zohar · 6 years ago
- d266b3f Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 6 years ago
- 2874c5f treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 by Thomas Gleixner · 6 years ago
- 8cdc23a ima: show rules with IMA_INMASK correctly by Roberto Sassu · 6 years ago
- 221be10 evm: check hash algorithm passed to init_desc() by Roberto Sassu · 6 years ago
- ec8f24b treewide: Add SPDX license identifier - Makefile/Kconfig by Thomas Gleixner · 6 years ago
- f400194 ima: fix wrong signed policy requirement when not appraising by Petr Vorel · 6 years ago
- 02aff8d Merge tag 'audit-pr-20190507' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago