Gitiles
Code Review
Sign In
review.shift-gmbh.com
/
SHIFTPHONES
/
kernel
/
shift
/
mainline
/
da2d3a4e4adabc6ccfb100bc9abd58ee9cd6c4b7
/
security
/
integrity
/
ima
74673fc
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
f218a29
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
ca79b0c
mm: convert totalram_pages and totalhigh_pages variables to atomic
by Arun KS
· 6 years ago
3f03bf9
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
047ce6d
Merge tag 'audit-pr-20181224' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
by Linus Torvalds
· 6 years ago
b49d564
security: integrity: partial revert of make ima_main explicitly non-modular
by Paul Gortmaker
· 6 years ago
1a9430d
ima: cleanup the match_token policy code
by Mimi Zohar
· 6 years ago
0db51ef2
Merge tag 'tpmdd-next-20181217' of git://git.infradead.org/users/jjs/linux-tpmdd into next-tpm
by James Morris
· 6 years ago
5580b4a
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity
by James Morris
· 6 years ago
eed9de3
ima: Use inode_is_open_for_write
by Nikolay Borisov
· 6 years ago
d7cecb6
ima: Support platform keyring for kernel appraisal
by Nayna Jain
· 6 years ago
876979c
security: audit and remove any unnecessary uses of module.h
by Paul Gortmaker
· 6 years ago
4f83d5e
security: integrity: make ima_main explicitly non-modular
by Paul Gortmaker
· 6 years ago
060190f
ima: don't measure/appraise files on efivarfs
by Mimi Zohar
· 6 years ago
d958083
x86/ima: define arch_get_ima_policy() for x86
by Eric Richter
· 6 years ago
6191706
ima: add support for arch specific policies
by Nayna Jain
· 6 years ago
c52657d
ima: refactor ima_init_policy()
by Nayna Jain
· 6 years ago
b5ca117
ima: prevent kexec_load syscall based on runtime secureboot flag
by Nayna Jain
· 6 years ago
2a1fe21
audit: use current whenever possible
by Paul Moore
· 6 years ago
95adc6b
tpm: use u32 instead of int for PCR index
by Tomas Winkler
· 6 years ago
a408e4a
ima: open a new file instance if no read permissions
by Goldwyn Rodrigues
· 6 years ago
1e4c8da
ima: fix showing large 'violations' or 'runtime_measurements_count'
by Eric Biggers
· 6 years ago
b2724d5
security/integrity: constify some read-only data
by Eric Biggers
· 6 years ago
f91e654
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
c715ebe
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
92d4a03
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
ec403d8e
ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL instead
by Stefan Berger
· 7 years ago
5c2a640
ima: Use tpm_default_chip() and call TPM functions with a tpm_chip
by Stefan Berger
· 7 years ago
dba31ee
ima: Differentiate auditing policy rules from "audit" actions
by Stefan Berger
· 7 years ago
2afd020
ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set
by Stefan Berger
· 7 years ago
3d2859d
ima: Use audit_log_format() rather than audit_log_string()
by Stefan Berger
· 7 years ago
8a3bcaf
ima: Call audit_log_string() rather than logging it untrusted
by Stefan Berger
· 7 years ago
4f0496d
ima: based on policy warn about loading firmware (pre-allocated buffer)
by Mimi Zohar
· 7 years ago
c77b8cd
module: replace the existing LSM hook in init_module
by Mimi Zohar
· 7 years ago
ef96837
ima: add build time policy
by Mimi Zohar
· 7 years ago
fed2512
ima: based on policy require signed firmware (sysfs fallback)
by Mimi Zohar
· 7 years ago
16c267a
ima: based on policy require signed kexec kernel images
by Mimi Zohar
· 7 years ago
6035a27
IMA: don't propagate opened through the entire thing
by Al Viro
· 7 years ago
00d535a
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
53b626f
IMA: use list_splice_tail_init_rcu() instead of its open coded variant
by Petko Manolov
· 7 years ago
b4df860
ima: use match_string() helper
by Yisheng Xie
· 7 years ago
6f0911a
ima: fix updating the ima_appraise flag
by Mimi Zohar
· 7 years ago
fd90bc5
ima: based on policy verify firmware signatures (pre-allocated buffer)
by Mimi Zohar
· 7 years ago
f1b08bb
ima: define a new policy condition based on the filesystem name
by Mimi Zohar
· 7 years ago
0c343af
integrity: Add an integrity directory in securityfs
by Matthew Garrett
· 7 years ago
4ecd993
ima: Remove unused variable ima_initialized
by Petr Vorel
· 7 years ago
de63676
ima: Unify logging
by Petr Vorel
· 7 years ago
ffb122d
ima: Reflect correct permissions for policy
by Petr Vorel
· 7 years ago
cdfb6b3
audit: use inline function to get audit context
by Richard Guy Briggs
· 7 years ago
ab60368
ima: Fallback to the builtin hash algorithm
by Petr Vorel
· 7 years ago
1c070b1
ima: Add smackfs to the default appraise/measure list
by Martin Townsend
· 7 years ago
f5e51fa
ima: Improvements in ima_appraise_measurement()
by Thiago Jung Bauermann
· 7 years ago
1775cb8
ima: Simplify ima_eventsig_init()
by Thiago Jung Bauermann
· 7 years ago
e456ef8
ima: drop vla in ima_audit_measurement()
by Tycho Andersen
· 7 years ago
fac37c62
ima: Fix Kconfig to select TPM 2.0 CRB interface
by Jiandi An
· 7 years ago
9e67028
ima: fail signature verification based on policy
by Mimi Zohar
· 7 years ago
a9a4935
ima: clear IMA_HASH
by Mimi Zohar
· 7 years ago
d77ccdc
ima: re-evaluate files on privileged mounted filesystems
by Mimi Zohar
· 7 years ago
57b56ac
ima: fail file signature verification on non-init mounted filesystems
by Mimi Zohar
· 7 years ago
d906c10
IMA: Support using new creds in appraisal policy
by Matthew Garrett
· 7 years ago
c472c07
iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw}
by Goffredo Baroncelli
· 7 years ago
ae0cb7b
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
3c29548
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
3b370b2
IMA: switch IMA over to new i_version API
by Jeff Layton
· 7 years ago
3644745
ima/policy: fix parsing of fsuuid
by Mike Rapoport
· 7 years ago
aad887f
tpm: use struct tpm_chip for tpm_chip_find_get()
by Jarkko Sakkinen
· 7 years ago
a2a2c3c
ima: Use i_version only when filesystem supports it
by Sascha Hauer
· 7 years ago
9c655be
ima: log message to module appraisal error
by Bruno E. O. Meneguele
· 7 years ago
4e8581e
ima: pass filename to ima_rdwr_violation_check()
by Roberto Sassu
· 7 years ago
72bf83b
ima: Fix line continuation format
by Joe Perches
· 7 years ago
da1b002
ima: support new "hash" and "dont_hash" policy actions
by Mimi Zohar
· 8 years ago
ac0bf02
ima: Use i_version only when filesystem supports it
by Sascha Hauer
· 7 years ago
0d73a55
ima: re-introduce own integrity cache lock
by Dmitry Kasatkin
· 7 years ago
50b9774
EVM: Add support for portable signature format
by Matthew Garrett
· 7 years ago
b7e27bc
ima: relax requiring a file signature for new files with zero length
by Mimi Zohar
· 7 years ago
020aae3
ima: do not update security.ima if appraisal status is not INTEGRITY_PASS
by Roberto Sassu
· 7 years ago
37dc795
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
by Linus Torvalds
· 7 years ago
b33e3cc
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
e5729f8
ima: Remove redundant conditional operator
by Thiago Jung Bauermann
· 7 years ago
39adb92
ima: Fix bool initialization/comparison
by Thomas Meyer
· 7 years ago
7c9bc09
ima: check signature enforcement against cmdline param instead of CONFIG
by Bruno E. O. Meneguele
· 7 years ago
ebe7c0a
ima: fix hash algorithm initialization
by Boshi Wang
· 7 years ago
a7d3d03
integrity: use kernel_read_file_from_path() to read x509 certs
by Christoph Hellwig
· 7 years ago
f3cc6b2
ima: always measure and audit files in policy
by Mimi Zohar
· 8 years ago
2068626
ima: don't remove the securityfs policy file
by Mimi Zohar
· 8 years ago
46f1414
ima: move to generic async completion
by Gilad Ben-Yossef
· 7 years ago
b244131
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
by Greg Kroah-Hartman
· 7 years ago
e24dd9e
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
915d9d2
ima: Log the same audit cause whenever a file has no signature
by Thiago Jung Bauermann
· 8 years ago
2663218
ima: Simplify policy_func_show.
by Thiago Jung Bauermann
· 8 years ago
bb543e3
integrity: Small code improvements
by Thiago Jung Bauermann
· 8 years ago
e4586c79
ima: fix get_binary_runtime_size()
by Roberto Sassu
· 8 years ago
28a8dc4
ima: use ima_parse_buf() to parse template data
by Roberto Sassu
· 8 years ago
47fdee6
ima: use ima_parse_buf() to parse measurements headers
by Roberto Sassu
· 8 years ago
b17fd9e
ima: introduce ima_parse_buf()
by Roberto Sassu
· 8 years ago
82e3bb4
ima: Add cgroups2 to the defaults list
by Laura Abbott
· 8 years ago
b4e2803
ima: use memdup_user_nul
by Geliang Tang
· 8 years ago
5d659f2
ima: fix up #endif comments
by Tycho Andersen
· 8 years ago
38d1926
IMA: Correct Kconfig dependencies for hash selection
by Ben Hutchings
· 8 years ago
6f6723e
ima: define is_ima_appraise_enabled()
by Mimi Zohar
· 8 years ago
Next »