Gitiles
Code Review Sign In
review.shift-gmbh.com / SHIFTPHONES / mainline / linux / 1425247383c5620d908de61a7d82a3fb07afb83f / security / integrity
  1. aef4892 Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 5 months ago
  2. efa916a Merge tag 'for-5.15/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm by Linus Torvalds · 3 years, 5 months ago
  3. b31eea2 efi: Don't use knowledge about efi_guid_t internals by Andy Shevchenko · 4 years ago
  4. cb181da IMA: reject unknown hash algorithms in ima_get_hash_algo by THOBY Simon · 3 years, 5 months ago
  5. 8ecd39c IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithms by THOBY Simon · 3 years, 5 months ago
  6. 4f2946a IMA: introduce a new policy option func=SETXATTR_CHECK by THOBY Simon · 3 years, 5 months ago
  7. 583a80a IMA: add a policy option to restrict xattr hash algorithms on appraisal by THOBY Simon · 3 years, 5 months ago
  8. 1624dc0 IMA: add support to restrict the hash algorithms used for file appraisal by THOBY Simon · 3 years, 5 months ago
  9. 50f742d IMA: block writes of the security.ima xattr with unsupported algorithms by THOBY Simon · 3 years, 5 months ago
  10. 8510505 IMA: remove the dependency on CRYPTO_MD5 by THOBY Simon · 3 years, 5 months ago
  11. 91ccbba dm ima: measure data on table load by Tushar Sugandhi · 3 years, 6 months ago
  12. ca3c9bd ima: Add digest and digest_len params to the functions to measure a buffer by Roberto Sassu · 3 years, 6 months ago
  13. ce5bb5a ima: Return int in the functions to measure a buffer by Roberto Sassu · 3 years, 6 months ago
  14. 5d1ef2c ima: Introduce ima_get_current_hash_algo() by Roberto Sassu · 3 years, 6 months ago
  15. a32ad90 IMA: remove -Wmissing-prototypes warning by Austin Kim · 3 years, 7 months ago
  16. 907a399 evm: Check xattr size discrepancy between kernel and user by Roberto Sassu · 3 years, 7 months ago
  17. 87ac3d0 evm: output EVM digest calculation info by Mimi Zohar · 3 years, 8 months ago
  18. 52c2083 IMA: support for duplicate measurement records by Tushar Sugandhi · 3 years, 8 months ago
  19. c679134 ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer' by Lakshmi Ramasubramanian · 3 years, 7 months ago
  20. 55748ac6 ima: differentiate between EVM failures in the audit log by Mimi Zohar · 3 years, 8 months ago
  21. 7d2201d ima: Fix fall-through warning for Clang by Gustavo A. R. Silva · 3 years, 7 months ago
  22. 531bf6a ima: Pass NULL instead of 0 to ima_get_action() in ima_file_mprotect() by Roberto Sassu · 3 years, 7 months ago
  23. 8c55941 ima: Include header defining ima_post_key_create_or_update() by Roberto Sassu · 3 years, 7 months ago
  24. 6b26285 ima/evm: Fix type mismatch by Roberto Sassu · 3 years, 7 months ago
  25. 24c9ae2 ima: Set correct casting types by Roberto Sassu · 3 years, 7 months ago
  26. d721c15 evm: Don't return an error in evm_write_xattrs() if audit is not enabled by Roberto Sassu · 3 years, 8 months ago
  27. 88016de ima: Define new template evm-sig by Roberto Sassu · 3 years, 8 months ago
  28. 8314b67 ima: Define new template fields xattrnames, xattrlengths and xattrvalues by Roberto Sassu · 3 years, 8 months ago
  29. 8c7a703 evm: Verify portable signatures against all protected xattrs by Roberto Sassu · 3 years, 8 months ago
  30. f8216f6 ima: Define new template field imode by Roberto Sassu · 3 years, 8 months ago
  31. 7dcfeac ima: Define new template fields iuid and igid by Roberto Sassu · 3 years, 8 months ago
  32. cde1391 ima: Add ima_show_template_uint() template library function by Roberto Sassu · 3 years, 8 months ago
  33. ed1b472 ima: Don't remove security.ima if file must not be appraised by Roberto Sassu · 3 years, 8 months ago
  34. 026d7fc ima: Introduce template field evmsig and write to field sig as fallback by Roberto Sassu · 3 years, 8 months ago
  35. 7aa5783 ima: Allow imasig requirement to be satisfied by EVM portable signatures by Roberto Sassu · 3 years, 8 months ago
  36. 1886ab0 evm: Allow setxattr() and setattr() for unmodified metadata by Roberto Sassu · 3 years, 8 months ago
  37. 7e135dc evm: Pass user namespace to set/remove xattr hooks by Roberto Sassu · 3 years, 8 months ago
  38. cdef685 evm: Allow xattr/attr operations for portable signatures by Roberto Sassu · 3 years, 8 months ago
  39. 4a804b8 evm: Introduce evm_hmac_disabled() to safely ignore verification errors by Roberto Sassu · 3 years, 8 months ago
  40. e3ccfe1 evm: Introduce evm_revalidate_status() by Roberto Sassu · 3 years, 8 months ago
  41. 9acc89d evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded by Roberto Sassu · 3 years, 8 months ago
  42. aa2ead7 evm: Load EVM key in ima_load_x509() to avoid appraisal by Roberto Sassu · 3 years, 8 months ago
  43. 9eea290 evm: Execute evm_inode_init_security() only when an HMAC key is loaded by Roberto Sassu · 3 years, 8 months ago
  44. 49219d9 evm: fix writing <securityfs>/evm overflow by Mimi Zohar · 3 years, 9 months ago
  45. e6f0bf0 Merge tag 'integrity-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 9 months ago
  46. 0080665 Merge tag 'devicetree-for-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux by Linus Torvalds · 3 years, 9 months ago
  47. f1c921f Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 9 months ago
  48. a4a78bc Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 3 years, 9 months ago
  49. b0e22b4 Merge tag 'keys-cve-2020-26541-v3' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 3 years, 9 months ago
  50. 28073eb ima: Fix fall-through warnings for Clang by Gustavo A. R. Silva · 4 years, 2 months ago
  51. 282c0a4 integrity: Add declarations to init_once void arguments. by Jiele Zhao · 3 years, 9 months ago
  52. 41d75dd ima: Fix function name error in comment. by Jiele Zhao · 3 years, 10 months ago
  53. 6cbdfb3 ima: enable loading of build time generated key on .ima keyring by Nayna Jain · 3 years, 9 months ago
  54. 947d705 ima: Support EC keys for signature verification by Stefan Berger · 3 years, 10 months ago
  55. 7990cca ima: Fix the error code for restoring the PCR value by Li Huafei · 3 years, 11 months ago
  56. 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 4 years ago
  57. f873b28 ima: without an IMA policy loaded, return quickly by Mimi Zohar · 3 years, 10 months ago
  58. 92063f3 integrity: double check iint_cache was initialized by Mimi Zohar · 3 years, 10 months ago
  59. ebd9c2a integrity: Load mokx variables into the blacklist keyring by Eric Snowberg · 4 years ago
  60. 56c5812 certs: Add EFI_CERT_X509_GUID support for dbx entries by Eric Snowberg · 4 years ago
  61. fee3ff9 powerpc: Move arch independent ima kexec functions to drivers/of/kexec.c by Lakshmi Ramasubramanian · 3 years, 11 months ago
  62. 0c60515 powerpc: Move ima buffer fields to struct kimage by Lakshmi Ramasubramanian · 3 years, 11 months ago
  63. c03c21b Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 3 years, 11 months ago
  64. 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 11 months ago
  65. f669221 integrity: Make function integrity_add_key() static by Wei Yongjun · 4 years ago
  66. cccb0ef Merge branch 'ima-kexec-fixes' into next-integrity by Mimi Zohar · 4 years ago
  67. f31e338 ima: Free IMA measurement buffer after kexec syscall by Lakshmi Ramasubramanian · 4 years ago
  68. 6d14c65 ima: Free IMA measurement buffer on error by Lakshmi Ramasubramanian · 4 years ago
  69. b3f82af IMA: Measure kernel version in early boot by Raphael Gianotti · 4 years ago
  70. a2d2329 ima: handle idmapped mounts by Christian Brauner · 4 years ago
  71. 549c729 fs: make helpers idmap mount aware by Christian Brauner · 4 years ago
  72. c7c7a1a1 xattr: handle idmapped mounts by Tycho Andersen · 4 years ago
  73. 4993e1f certs: Fix blacklist flag type confusion by David Howells · 4 years, 2 months ago
  74. 03cee16 IMA: define a builtin critical data measurement policy by Lakshmi Ramasubramanian · 4 years ago
  75. 9f5d7d2 IMA: extend critical data hook to limit the measurement based on a label by Tushar Sugandhi · 4 years ago
  76. 47d76a4 IMA: limit critical data measurement based on a label by Tushar Sugandhi · 4 years ago
  77. c4e43aa IMA: add policy rule to measure critical data by Tushar Sugandhi · 4 years ago
  78. d6e6450 IMA: define a hook to measure kernel integrity critical data by Tushar Sugandhi · 4 years ago
  79. 291af65 IMA: add support to measure buffer data hash by Tushar Sugandhi · 4 years ago
  80. 2b4a247 IMA: generalize keyring specific measurement constructs by Tushar Sugandhi · 4 years ago
  81. ccf11db evm: Fix memleak in init_desc by Dinghao Liu · 4 years ago
  82. 4a1106a Merge tag 'efi_updates_for_v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 4 years, 1 month ago
  83. e20a9b92 Merge tag 'integrity-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 1 month ago
  84. d635a69 Merge tag 'net-next-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 4 years, 1 month ago
  85. 9e4b0d5 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 4 years, 1 month ago
  86. 207cdd5 ima: Don't modify file descriptor mode on the fly by Roberto Sassu · 4 years, 2 months ago
  87. 403319b ima: Implement ima_inode_hash by KP Singh · 4 years, 2 months ago
  88. dea87d0 ima: select ima-buf template for buffer measurement by Lakshmi Ramasubramanian · 4 years, 2 months ago
  89. a24d22b crypto: sha - split sha.h into sha1.h and sha2.h by Eric Biggers · 4 years, 2 months ago
  90. 25519d6 ima: generalize x86/EFI arch glue for other EFI architectures by Chester Lin · 4 years, 3 months ago
  91. b000d5c ima: defer arch_ima_get_secureboot() call to IMA init time by Ard Biesheuvel · 4 years, 3 months ago
  92. 4739eea ima: Replace zero-length array with flexible-array member by Gustavo A. R. Silva · 4 years, 5 months ago
  93. 840e5bb Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 3 months ago
  94. 726eb70 Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc by Linus Torvalds · 4 years, 3 months ago
  95. 39a5101 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 4 years, 3 months ago
  96. e6412f9 Merge tag 'efi-core-2020-10-12' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 4 years, 3 months ago
  97. 0fa8e08 fs/kernel_file_read: Add "offset" arg for partial reads by Kees Cook · 4 years, 4 months ago
  98. 34736da IMA: Add support for file reads without contents by Scott Branden · 4 years, 4 months ago
  99. 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 4 months ago
  100. 4f2d99b firmware_loader: Use security_post_load_data() by Kees Cook · 4 years, 4 months ago