- 32ba540 evm: mark evm_fixmode as __ro_after_init by Austin Kim · 3 years, 2 months ago
- 907a399 evm: Check xattr size discrepancy between kernel and user by Roberto Sassu · 3 years, 6 months ago
- 87ac3d0 evm: output EVM digest calculation info by Mimi Zohar · 3 years, 8 months ago
- 6b26285 ima/evm: Fix type mismatch by Roberto Sassu · 3 years, 7 months ago
- d721c15 evm: Don't return an error in evm_write_xattrs() if audit is not enabled by Roberto Sassu · 3 years, 7 months ago
- 8314b67 ima: Define new template fields xattrnames, xattrlengths and xattrvalues by Roberto Sassu · 3 years, 7 months ago
- 8c7a703 evm: Verify portable signatures against all protected xattrs by Roberto Sassu · 3 years, 7 months ago
- 1886ab0 evm: Allow setxattr() and setattr() for unmodified metadata by Roberto Sassu · 3 years, 8 months ago
- 7e135dc evm: Pass user namespace to set/remove xattr hooks by Roberto Sassu · 3 years, 8 months ago
- cdef685 evm: Allow xattr/attr operations for portable signatures by Roberto Sassu · 3 years, 8 months ago
- 4a804b8 evm: Introduce evm_hmac_disabled() to safely ignore verification errors by Roberto Sassu · 3 years, 7 months ago
- e3ccfe1 evm: Introduce evm_revalidate_status() by Roberto Sassu · 3 years, 8 months ago
- 9acc89d evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded by Roberto Sassu · 3 years, 8 months ago
- 9eea290 evm: Execute evm_inode_init_security() only when an HMAC key is loaded by Roberto Sassu · 3 years, 8 months ago
- 49219d9 evm: fix writing <securityfs>/evm overflow by Mimi Zohar · 3 years, 8 months ago
- 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 10 months ago
- 549c729 fs: make helpers idmap mount aware by Christian Brauner · 4 years ago
- c7c7a1a1 xattr: handle idmapped mounts by Tycho Andersen · 4 years ago
- ccf11db evm: Fix memleak in init_desc by Dinghao Liu · 4 years ago
- 455b6c9 evm: Check size of security.evm before using it by Roberto Sassu · 4 years, 4 months ago
- 7fe2bb7 integrity: invalid kernel parameters feedback by Bruno Meneguele · 4 years, 4 months ago
- 3c0ad98 Merge tag 'integrity-v5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 8433856 evm: Fix a small race in init_desc() by Dan Carpenter · 4 years, 8 months ago
- 0c4395f evm: Fix possible memory leak in evm_calc_hmac_or_hash() by Roberto Sassu · 4 years, 9 months ago
- 770f605 evm: Fix RCU list related warnings by Madhuparna Bhowmik · 4 years, 8 months ago
- 53de3b0 evm: Check also if *tfm is an error pointer in init_desc() by Roberto Sassu · 4 years, 8 months ago
- 555d6d7 integrity: Remove duplicate pr_fmt definitions by Tushar Sugandhi · 4 years, 10 months ago
- 028db3e Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs" by Linus Torvalds · 5 years ago
- 8b68150 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 5 years ago
- 0f75ef6 Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 5 years ago
- 650b29d integrity: Introduce struct evm_xattr by Thiago Jung Bauermann · 6 years ago
- 2e12256 keys: Replace uid/gid/perm permissions checking with an ACL by David Howells · 6 years ago
- b886d83c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 by Thomas Gleixner · 6 years ago
- d266b3f Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 6 years ago
- 221be10 evm: check hash algorithm passed to init_desc() by Roberto Sassu · 6 years ago
- ec8f24b treewide: Add SPDX license identifier - Makefile/Kconfig by Thomas Gleixner · 6 years ago
- 02aff8d Merge tag 'audit-pr-20190507' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- 877b569 crypto: shash - remove shash_desc::flags by Eric Biggers · 6 years ago
- a1aa08a audit: link integrity evm_write_xattrs record to syscall event by Richard Guy Briggs · 6 years ago
- e7fde07 evm: Use defined constant for UUID representation by Andy Shevchenko · 6 years ago
- c8b3752 evm: remove set but not used variable 'xattr' by YueHaibing · 6 years ago
- b71acb0 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 6 years ago
- 876979c security: audit and remove any unnecessary uses of module.h by Paul Gortmaker · 6 years ago
- 3aafb1f security: integrity: make evm_main explicitly non-modular by Paul Gortmaker · 6 years ago
- 3d234b3 crypto: drop mask=CRYPTO_ALG_ASYNC from 'shash' tfm allocations by Eric Biggers · 6 years ago
- b2724d5 security/integrity: constify some read-only data by Eric Biggers · 6 years ago
- 3dd0f18 EVM: fix return value check in evm_write_xattrs() by Wei Yongjun · 6 years ago
- 5feeb61 evm: Allow non-SHA1 digital signatures by Matthew Garrett · 7 years ago
- e2861fa evm: Don't deadlock if a crypto algorithm is unavailable by Matthew Garrett · 7 years ago
- 00d535a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
- b5c90a7 EVM: unlock on error path in evm_read_xattrs() by Dan Carpenter · 7 years ago
- a41d80a EVM: prevent array underflow in evm_write_xattrs() by Dan Carpenter · 7 years ago
- 72acd64 EVM: Fix null dereference on xattr when xattr fails to allocate by Colin Ian King · 7 years ago
- 825b865 EVM: fix memory leak of temporary buffer 'temp' by Colin Ian King · 7 years ago
- fa516b6 EVM: Allow runtime modification of the set of verified xattrs by Matthew Garrett · 7 years ago
- 21af766 EVM: turn evm_config_xattrnames into a list by Matthew Garrett · 7 years ago
- 0c343af integrity: Add an integrity directory in securityfs by Matthew Garrett · 7 years ago
- a3a5c96 evm: Don't update hmacs in user ns mounts by Seth Forshee · 7 years ago
- 70946c4a evm: check for remount ro in progress before writing by Sascha Hauer · 7 years ago
- 17d7b0a evm: Constify *integrity_status_msg[] by Hernán Gonzalez · 7 years ago
- 1a82cee evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.c by Hernán Gonzalez · 7 years ago
- 50b9774 EVM: Add support for portable signature format by Matthew Garrett · 7 years ago
- ae1ba16 EVM: Allow userland to permit modification of EVM-protected metadata by Matthew Garrett · 7 years ago
- 0485d06 EVM: Only complain about a missing HMAC key once by Matthew Garrett · 7 years ago
- f00d797 EVM: Allow userspace to signal an RSA key has been loaded by Matthew Garrett · 7 years ago
- 096b854 EVM: Include security.apparmor in EVM measurements by Matthew Garrett · 7 years ago
- 8578709 fs: switch ->s_uuid to uuid_t by Christoph Hellwig · 8 years ago
- 50d3439 sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sched/task_stack.h> by Ingo Molnar · 8 years ago
- 412ac77a Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 8 years ago
- 19339c2 Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC" by Eric W. Biederman · 8 years ago
- b4bfec7 security/integrity: Harden against malformed xattrs by Seth Forshee · 8 years ago
- 5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
- 0b3c976 evm: Translate user/group ids relative to s_user_ns when computing HMAC by Seth Forshee · 10 years ago
- ce23e64 ->getxattr(): pass dentry and inode as separate arguments by Al Viro · 9 years ago
- fc64005 don't bother with ->d_inode->i_sb - it's always equal to ->d_sb by Al Viro · 9 years ago
- 613317b EVM: Use crypto_memneq() for digest comparisons by Ryan Ware · 9 years ago
- 05d3884 evm: EVM_LOAD_X509 depends on EVM by Arnd Bergmann · 9 years ago
- 523b74b evm: reset EVM status when file attributes change by Dmitry Kasatkin · 9 years ago
- 7626676 evm: provide a function to set the EVM key from the kernel by Dmitry Kasatkin · 9 years ago
- 26ddabf evm: enable EVM when X509 certificate is loaded by Dmitry Kasatkin · 9 years ago
- 2ce523e evm: load an x509 certificate from the kernel by Dmitry Kasatkin · 9 years ago
- f4dc377 integrity: define '.evm' as a builtin 'trusted' keyring by Dmitry Kasatkin · 9 years ago
- 146aa8b KEYS: Merge the type-specific data with the payload data by David Howells · 9 years ago
- 7c51bb00 evm: fix potential race when removing xattrs by Dmitry Kasatkin · 10 years ago
- 5101a18 evm: labeling pseudo filesystems exception by Mimi Zohar · 10 years ago
- c6f493d VFS: security/: d_backing_inode() annotations by David Howells · 10 years ago
- 6341e62 kconfig: use bool instead of boolean for type definition attributes by Christoph Jaeger · 10 years ago
- 67e2c38 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 10 years ago
- 3b1deef evm: check xattr value length and type in evm_inode_setxattr() by Dmitry Kasatkin · 10 years ago
- c2baec7 evm: skip replacing EVM signature with HMAC on read-only filesystem by Dmitry Kasatkin · 10 years ago
- 7ef84e6 integrity: base integrity subsystem kconfig options on integrity by Dmitry Kasatkin · 11 years ago
- 3dcbad5 evm: properly handle INTEGRITY_NOXATTRS EVM status by Dmitry Kasatkin · 10 years ago
- 1f10097 evm: prevent passing integrity check if xattr read fails by Dmitry Kasatkin · 10 years ago
- e7d021e evm: fix checkpatch warnings by Dmitry Kasatkin · 10 years ago
- 2fb1c9a evm: prohibit userspace writing 'security.evm' HMAC value by Mimi Zohar · 11 years ago
- 3e38df5 evm: provide option to protect additional SMACK xattrs by Dmitry Kasatkin · 11 years ago
- d3b3367 evm: replace HMAC version with attribute mask by Dmitry Kasatkin · 11 years ago
- 5166701 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 11 years ago
- 627bf81 get rid of pointless checks for NULL ->i_op by Al Viro · 11 years ago
- a3aef94 evm: enable key retention service automatically by Dmitry Kasatkin · 11 years ago