Log - 4d9ec1c0ced6e03a9cab04986f88ac66d6ef984e - SHIFTPHONES/mainline/linux

273df86 ima: Check against blacklisted hashes for files with modsig by Nayna Jain · 5 years ago
e14555e ima: Make process_buffer_measurement() generic by Nayna Jain · 5 years ago
aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
2a7f0e5 ima: ima_api: Use struct_size() in kzalloc() by Gustavo A. R. Silva · 5 years ago
fa5b571 ima: use struct_size() in kzalloc() by Gustavo A. R. Silva · 6 years ago
556d971 ima: Fix use after free in ima_read_modsig() by Thiago Jung Bauermann · 5 years ago
29d3c1c kexec: Allow kexec_file() with appropriate IMA policy when locked down by Matthew Garrett · 5 years ago
99d5cadf kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE by Jiri Bohac · 5 years ago
4ece312 ima: fix freeing ongoing ahash_request by Sascha Hauer · 6 years ago
f5e1040 ima: always return negative code for error by Sascha Hauer · 6 years ago
e509225 ima: Store the measurement again when appraising a modsig by Thiago Jung Bauermann · 6 years ago
3878d50 ima: Define ima-modsig template by Thiago Jung Bauermann · 6 years ago
1558822 ima: Collect modsig by Thiago Jung Bauermann · 6 years ago
39b0709 ima: Implement support for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
a5fbeb6 ima: Factor xattr_verify() out of ima_appraise_measurement() by Thiago Jung Bauermann · 6 years ago
9044d62 ima: Add modsig appraise_type option for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
b36f281 ima: initialize the "template" field with the default template by Mimi Zohar · 6 years ago
028db3e Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs" by Linus Torvalds · 6 years ago
8b68150 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 6 years ago
0f75ef6 Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 6 years ago
650b29d integrity: Introduce struct evm_xattr by Thiago Jung Bauermann · 6 years ago
337619e ima: Update MAX_TEMPLATE_NAME_LEN to fit largest reasonable definition by Thiago Jung Bauermann · 6 years ago
86b4da8 IMA: Define a new template field buf by Prakhar Srivastava · 6 years ago
2e12256 keys: Replace uid/gid/perm permissions checking with an ACL by David Howells · 6 years ago
b093512 IMA: Define a new hook to measure the kexec boot command line arguments by Prakhar Srivastava · 6 years ago
19453ce0 IMA: support for per policy rule template formats by Matthew Garrett · 6 years ago
e038f5f ima: Use designated initializers for struct ima_event_data by Thiago Jung Bauermann · 6 years ago
b169424 ima: use the lsm policy update notifier by Janne Karhunen · 6 years ago
9e1e5d4 x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICY by Nayna Jain · 6 years ago
68f2529 ima: Make arch_policy_entry static by YueHaibing · 6 years ago
b886d83c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 by Thomas Gleixner · 6 years ago
2cd4737 ima: prevent a file already mmap'ed write to be mmap'ed execute by Mimi Zohar · 6 years ago
d266b3f Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 6 years ago
2874c5f treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 by Thomas Gleixner · 6 years ago
8cdc23a ima: show rules with IMA_INMASK correctly by Roberto Sassu · 6 years ago
ec8f24b treewide: Add SPDX license identifier - Makefile/Kconfig by Thomas Gleixner · 6 years ago
f400194 ima: fix wrong signed policy requirement when not appraising by Petr Vorel · 6 years ago
877b569 crypto: shash - remove shash_desc::flags by Eric Biggers · 6 years ago
5af7f11 Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
c3665a6 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
09186e5 security: mark expected switch fall-throughs and add a missing break by Gustavo A. R. Silva · 6 years ago
0b6cf6b tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend() by Roberto Sassu · 6 years ago
879b589 tpm: retrieve digest size of unknown algorithms with PCR read by Roberto Sassu · 6 years ago
fdb2410 ima: define ima_post_create_tmpfile() hook and add missing call by Mimi Zohar · 6 years ago
90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
74673fc Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
f218a29 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
ca79b0c mm: convert totalram_pages and totalhigh_pages variables to atomic by Arun KS · 6 years ago
3f03bf9 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
047ce6d Merge tag 'audit-pr-20181224' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
b49d564 security: integrity: partial revert of make ima_main explicitly non-modular by Paul Gortmaker · 6 years ago
1a9430d ima: cleanup the match_token policy code by Mimi Zohar · 6 years ago
0db51ef2 Merge tag 'tpmdd-next-20181217' of git://git.infradead.org/users/jjs/linux-tpmdd into next-tpm by James Morris · 6 years ago
5580b4a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity by James Morris · 6 years ago
eed9de3 ima: Use inode_is_open_for_write by Nikolay Borisov · 6 years ago
d7cecb6 ima: Support platform keyring for kernel appraisal by Nayna Jain · 6 years ago
876979c security: audit and remove any unnecessary uses of module.h by Paul Gortmaker · 6 years ago
4f83d5e security: integrity: make ima_main explicitly non-modular by Paul Gortmaker · 6 years ago
060190f ima: don't measure/appraise files on efivarfs by Mimi Zohar · 6 years ago
d958083 x86/ima: define arch_get_ima_policy() for x86 by Eric Richter · 6 years ago
6191706 ima: add support for arch specific policies by Nayna Jain · 6 years ago
c52657d ima: refactor ima_init_policy() by Nayna Jain · 6 years ago
b5ca117 ima: prevent kexec_load syscall based on runtime secureboot flag by Nayna Jain · 6 years ago
2a1fe21 audit: use current whenever possible by Paul Moore · 6 years ago
95adc6b tpm: use u32 instead of int for PCR index by Tomas Winkler · 6 years ago
a408e4a ima: open a new file instance if no read permissions by Goldwyn Rodrigues · 6 years ago
1e4c8da ima: fix showing large 'violations' or 'runtime_measurements_count' by Eric Biggers · 6 years ago
b2724d5 security/integrity: constify some read-only data by Eric Biggers · 6 years ago
f91e654 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
c715ebe Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
92d4a03 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
ec403d8e ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL instead by Stefan Berger · 7 years ago
5c2a640 ima: Use tpm_default_chip() and call TPM functions with a tpm_chip by Stefan Berger · 7 years ago
dba31ee ima: Differentiate auditing policy rules from "audit" actions by Stefan Berger · 7 years ago
2afd020 ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set by Stefan Berger · 7 years ago
3d2859d ima: Use audit_log_format() rather than audit_log_string() by Stefan Berger · 7 years ago
8a3bcaf ima: Call audit_log_string() rather than logging it untrusted by Stefan Berger · 7 years ago
4f0496d ima: based on policy warn about loading firmware (pre-allocated buffer) by Mimi Zohar · 7 years ago
c77b8cd module: replace the existing LSM hook in init_module by Mimi Zohar · 7 years ago
ef96837 ima: add build time policy by Mimi Zohar · 7 years ago
fed2512 ima: based on policy require signed firmware (sysfs fallback) by Mimi Zohar · 7 years ago
16c267a ima: based on policy require signed kexec kernel images by Mimi Zohar · 7 years ago
6035a27 IMA: don't propagate opened through the entire thing by Al Viro · 7 years ago
00d535a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
53b626f IMA: use list_splice_tail_init_rcu() instead of its open coded variant by Petko Manolov · 7 years ago
b4df860 ima: use match_string() helper by Yisheng Xie · 7 years ago
6f0911a ima: fix updating the ima_appraise flag by Mimi Zohar · 7 years ago
fd90bc5 ima: based on policy verify firmware signatures (pre-allocated buffer) by Mimi Zohar · 7 years ago
f1b08bb ima: define a new policy condition based on the filesystem name by Mimi Zohar · 7 years ago
0c343af integrity: Add an integrity directory in securityfs by Matthew Garrett · 7 years ago
4ecd993 ima: Remove unused variable ima_initialized by Petr Vorel · 7 years ago
de63676 ima: Unify logging by Petr Vorel · 7 years ago
ffb122d ima: Reflect correct permissions for policy by Petr Vorel · 7 years ago
cdfb6b3 audit: use inline function to get audit context by Richard Guy Briggs · 7 years ago
ab60368 ima: Fallback to the builtin hash algorithm by Petr Vorel · 7 years ago
1c070b1 ima: Add smackfs to the default appraise/measure list by Martin Townsend · 7 years ago
f5e51fa ima: Improvements in ima_appraise_measurement() by Thiago Jung Bauermann · 7 years ago
1775cb8 ima: Simplify ima_eventsig_init() by Thiago Jung Bauermann · 7 years ago
e456ef8 ima: drop vla in ima_audit_measurement() by Tycho Andersen · 7 years ago