- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 5 months ago
- ce13266 Merge tag 'for-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 4 years, 5 months ago
- c9fecf5 Replace HTTP links with HTTPS ones: security by Alexander A. Klimov · 4 years, 6 months ago
- 4cec929 Merge tag 'integrity-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 5 months ago
- 3db0d0c integrity: remove redundant initialization of variable ret by Colin Ian King · 4 years, 6 months ago
- 311aa6a ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtime by Bruno Meneguele · 4 years, 6 months ago
- 1768215 ima: AppArmor satisfies the audit rule requirements by Tyler Hicks · 4 years, 7 months ago
- b8867ee ima: Rename internal filter rule functions by Tyler Hicks · 4 years, 6 months ago
- 4834177 ima: Support additional conditionals in the KEXEC_CMDLINE hook function by Tyler Hicks · 4 years, 6 months ago
- 592b24c ima: Use the common function to detect LSM conditionals in a rule by Tyler Hicks · 4 years, 6 months ago
- 30031b0 ima: Move comprehensive rule validation checks out of the token parser by Tyler Hicks · 4 years, 6 months ago
- aa0c022 ima: Use correct type for the args_p member of ima_rule_entry.lsm elements by Tyler Hicks · 4 years, 6 months ago
- 39e5993 ima: Shallow copy the args_p member of ima_rule_entry.lsm elements by Tyler Hicks · 4 years, 6 months ago
- 5f3e926 ima: Fail rule parsing when appraise_flag=blacklist is unsupportable by Tyler Hicks · 4 years, 6 months ago
- eb624fe ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid cond by Tyler Hicks · 4 years, 6 months ago
- db2045f ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invalid cond by Tyler Hicks · 4 years, 6 months ago
- 7121834 ima: Fail rule parsing when buffer hook functions have an invalid action by Tyler Hicks · 4 years, 6 months ago
- 2bdd737 ima: Free the entire rule if it fails to parse by Tyler Hicks · 4 years, 6 months ago
- 465aee7 ima: Free the entire rule when deleting a list of rules by Tyler Hicks · 4 years, 6 months ago
- 9ff8a61 ima: Have the LSM free its audit rule by Tyler Hicks · 4 years, 6 months ago
- 34e980b IMA: Add audit log for failure conditions by Lakshmi Ramasubramanian · 4 years, 7 months ago
- 2f84588 integrity: Add errno field in audit message by Lakshmi Ramasubramanian · 4 years, 7 months ago
- a1f9b1c integrity/ima: switch to using __kernel_read by Christoph Hellwig · 4 years, 8 months ago
- 20c59ce ima: extend boot_aggregate with kernel measurements by Maurizio Drocco · 4 years, 7 months ago
- eb492c6 ima: Replace zero-length array with flexible-array by Gustavo A. R. Silva · 4 years, 8 months ago
- 923ea16 Merge tag 'integrity-v5.8-fix' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 4235b1a ima: fix mprotect checking by Mimi Zohar · 4 years, 7 months ago
- 8b8c704 ima: Remove __init annotation from ima_pcrread() by Roberto Sassu · 4 years, 7 months ago
- 3c0ad98 Merge tag 'integrity-v5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 42413b4 ima: Directly free *entry in ima_alloc_init_template() if digests is NULL by Roberto Sassu · 4 years, 7 months ago
- 6cc7c26 ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() by Roberto Sassu · 4 years, 7 months ago
- 067a436 ima: Directly assign the ima_default_policy pointer to ima_rules by Roberto Sassu · 4 years, 7 months ago
- 8eb613c ima: verify mprotect change is consistent with mmap policy by Mimi Zohar · 4 years, 8 months ago
- 8433856 evm: Fix a small race in init_desc() by Dan Carpenter · 4 years, 8 months ago
- 0c4395f evm: Fix possible memory leak in evm_calc_hmac_or_hash() by Roberto Sassu · 4 years, 9 months ago
- b59fda4 ima: Set again build_ima_appraise variable by Krzysztof Struczynski · 4 years, 9 months ago
- 6ee2844 ima: Remove redundant policy rule set in add_rules() by Krzysztof Struczynski · 4 years, 9 months ago
- 1129d31 ima: Fix ima digest hash table key calculation by Krzysztof Struczynski · 4 years, 9 months ago
- 770f605 evm: Fix RCU list related warnings by Madhuparna Bhowmik · 4 years, 8 months ago
- 2e3a34e ima: Fix return value of ima_write_policy() by Roberto Sassu · 4 years, 9 months ago
- 53de3b0 evm: Check also if *tfm is an error pointer in init_desc() by Roberto Sassu · 4 years, 9 months ago
- 0014cc0 ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() by Roberto Sassu · 4 years, 9 months ago
- 2592677 ima: Use ima_hash_algo for collision detection in the measurement list by Roberto Sassu · 4 years, 10 months ago
- 1ea973d ima: Calculate and extend PCR with digests in ima_template_entry by Roberto Sassu · 4 years, 10 months ago
- 6d94809 ima: Allocate and initialize tfm for each PCR bank by Roberto Sassu · 4 years, 10 months ago
- aa724fe ima: Switch to dynamically allocated buffer for template digests by Roberto Sassu · 4 years, 10 months ago
- 7ca7964 ima: Store template digest directly in ima_template_entry by Roberto Sassu · 4 years, 10 months ago
- e144d6b ima: Evaluate error in init_ima() by Roberto Sassu · 4 years, 10 months ago
- 6f1a1d1 ima: Switch to ima_hash_algo for boot aggregate by Roberto Sassu · 4 years, 10 months ago
- 7f21831 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 9 months ago
- 9e2b4be ima: add a new CONFIG for loading arch-specific policies by Nayna Jain · 4 years, 10 months ago
- 555d6d7 integrity: Remove duplicate pr_fmt definitions by Tushar Sugandhi · 5 years ago
- 72ec611 IMA: Add log statements for failure conditions by Tushar Sugandhi · 5 years ago
- e2bf681 IMA: Update KBUILD_MODNAME for IMA files to ima by Tushar Sugandhi · 5 years ago
- e976568 Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi into efi/core by Ingo Molnar · 4 years, 11 months ago
- 6b75d54 integrity: Check properly whether EFI GetVariable() is available by Ard Biesheuvel · 5 years ago
- 5780b9a ima: add sm3 algorithm to hash algorithm configuration list by Tianjia Zhang · 5 years ago
- 3be54d5 efi: Only print errors about failing to get certs if EFI vars are found by Javier Martinez Canillas · 5 years ago
- 73a0bff Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 5 years ago
- 5b3014b IMA: Defined delayed workqueue to free the queued keys by Lakshmi Ramasubramanian · 5 years ago
- 450d0fd IMA: Call workqueue functions to measure queued keys by Lakshmi Ramasubramanian · 5 years ago
- 9f81a2e IMA: Define workqueue for early boot key measurements by Lakshmi Ramasubramanian · 5 years ago
- 5c7bac9 IMA: pre-allocate buffer to hold keyrings string by Lakshmi Ramasubramanian · 5 years ago
- 483ec26 ima: ima/lsm policy rule loading logic bug fixes by Janne Karhunen · 5 years ago
- 6beea7a ima: add the ability to query the cached hash of a given file by Florent Revest · 5 years ago
- 5350ceb ima: Add a space after printing LSM rules for readability by Clay Chang · 5 years ago
- ea78979 IMA: fix measuring asymmetric keys Kconfig by Lakshmi Ramasubramanian · 5 years ago
- 2b60c0e IMA: Read keyrings= option from the IMA policy by Lakshmi Ramasubramanian · 5 years ago
- e9085e0 IMA: Add support to limit measuring keys by Lakshmi Ramasubramanian · 5 years ago
- 88e70da IMA: Define an IMA hook to measure keys by Lakshmi Ramasubramanian · 5 years ago
- 5808611 IMA: Add KEY_CHECK func to measure keys by Lakshmi Ramasubramanian · 5 years ago
- c5563ba IMA: Check IMA policy flag by Lakshmi Ramasubramanian · 5 years ago
- 96c9e1d ima: avoid appraise error for hash calc interrupt by Patrick Callaghan · 5 years ago
- c593642 treewide: Use sizeof_field() macro by Pankaj Bharadiya · 5 years ago
- 6f09019 x86/efi: remove unused variables by YueHaibing · 5 years ago
- 8220e22 powerpc: Load firmware trusted keys/hashes into kernel keyring by Nayna Jain · 5 years ago
- ad72367 x86/efi: move common keyring handler functions to new file by Nayna Jain · 5 years ago
- 273df86 ima: Check against blacklisted hashes for files with modsig by Nayna Jain · 5 years ago
- e14555e ima: Make process_buffer_measurement() generic by Nayna Jain · 5 years ago
- 7a8beb7 integrity: remove pointless subdir-$(CONFIG_...) by Masahiro Yamada · 5 years ago
- 6b190d3 integrity: remove unneeded, broken attempt to add -fshort-wchar by Masahiro Yamada · 5 years ago
- aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
- 2a7f0e5 ima: ima_api: Use struct_size() in kzalloc() by Gustavo A. R. Silva · 5 years ago
- fa5b571 ima: use struct_size() in kzalloc() by Gustavo A. R. Silva · 6 years ago
- 556d971 ima: Fix use after free in ima_read_modsig() by Thiago Jung Bauermann · 5 years ago
- 29d3c1c kexec: Allow kexec_file() with appropriate IMA policy when locked down by Matthew Garrett · 5 years ago
- 99d5cadf kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE by Jiri Bohac · 5 years ago
- 4ece312 ima: fix freeing ongoing ahash_request by Sascha Hauer · 6 years ago
- f5e1040 ima: always return negative code for error by Sascha Hauer · 6 years ago
- e509225 ima: Store the measurement again when appraising a modsig by Thiago Jung Bauermann · 6 years ago
- 3878d50 ima: Define ima-modsig template by Thiago Jung Bauermann · 6 years ago
- 1558822 ima: Collect modsig by Thiago Jung Bauermann · 6 years ago
- 39b0709 ima: Implement support for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
- a5fbeb6 ima: Factor xattr_verify() out of ima_appraise_measurement() by Thiago Jung Bauermann · 6 years ago
- 9044d62 ima: Add modsig appraise_type option for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
- cf38fed integrity: Select CONFIG_KEYS instead of depending on it by Thiago Jung Bauermann · 6 years ago
- b36f281 ima: initialize the "template" field with the default template by Mimi Zohar · 5 years ago
- 028db3e Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs" by Linus Torvalds · 6 years ago
- 8b68150 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 6 years ago
- 0f75ef6 Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 6 years ago