Gitiles
Code Review Sign In
review.shift-gmbh.com / SHIFTPHONES / mainline / linux / 7f016b35ca7623c71b31facdde080e8ce171a697 / security / integrity / ima / ima_main.c
  1. aef4892 Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 4 months ago
  2. 4f2946a IMA: introduce a new policy option func=SETXATTR_CHECK by THOBY Simon · 3 years, 5 months ago
  3. 1624dc0 IMA: add support to restrict the hash algorithms used for file appraisal by THOBY Simon · 3 years, 5 months ago
  4. 91ccbba dm ima: measure data on table load by Tushar Sugandhi · 3 years, 6 months ago
  5. ca3c9bd ima: Add digest and digest_len params to the functions to measure a buffer by Roberto Sassu · 3 years, 6 months ago
  6. ce5bb5a ima: Return int in the functions to measure a buffer by Roberto Sassu · 3 years, 6 months ago
  7. 5d1ef2c ima: Introduce ima_get_current_hash_algo() by Roberto Sassu · 3 years, 6 months ago
  8. 531bf6a ima: Pass NULL instead of 0 to ima_get_action() in ima_file_mprotect() by Roberto Sassu · 3 years, 7 months ago
  9. e6f0bf0 Merge tag 'integrity-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 9 months ago
  10. 28073eb ima: Fix fall-through warnings for Clang by Gustavo A. R. Silva · 4 years, 2 months ago
  11. 41d75dd ima: Fix function name error in comment. by Jiele Zhao · 3 years, 9 months ago
  12. 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 3 years, 11 months ago
  13. f873b28 ima: without an IMA policy loaded, return quickly by Mimi Zohar · 3 years, 10 months ago
  14. 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 11 months ago
  15. a2d2329 ima: handle idmapped mounts by Christian Brauner · 4 years ago
  16. 9f5d7d2 IMA: extend critical data hook to limit the measurement based on a label by Tushar Sugandhi · 4 years ago
  17. d6e6450 IMA: define a hook to measure kernel integrity critical data by Tushar Sugandhi · 4 years ago
  18. 291af65 IMA: add support to measure buffer data hash by Tushar Sugandhi · 4 years ago
  19. 2b4a247 IMA: generalize keyring specific measurement constructs by Tushar Sugandhi · 4 years ago
  20. e20a9b92 Merge tag 'integrity-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 1 month ago
  21. 403319b ima: Implement ima_inode_hash by KP Singh · 4 years, 2 months ago
  22. dea87d0 ima: select ima-buf template for buffer measurement by Lakshmi Ramasubramanian · 4 years, 2 months ago
  23. b000d5c ima: defer arch_ima_get_secureboot() call to IMA init time by Ard Biesheuvel · 4 years, 3 months ago
  24. 840e5bb Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 3 months ago
  25. 34736da IMA: Add support for file reads without contents by Scott Branden · 4 years, 3 months ago
  26. 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 3 months ago
  27. 4f2d99b firmware_loader: Use security_post_load_data() by Kees Cook · 4 years, 3 months ago
  28. b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 3 months ago
  29. b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 3 months ago
  30. c307459 fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum by Kees Cook · 4 years, 3 months ago
  31. aa662fc ima: Fix NULL pointer dereference in ima_file_hash by KP Singh · 4 years, 4 months ago
  32. 7fe2bb7 integrity: invalid kernel parameters feedback by Bruno Meneguele · 4 years, 4 months ago
  33. 4834177 ima: Support additional conditionals in the KEXEC_CMDLINE hook function by Tyler Hicks · 4 years, 6 months ago
  34. 34e980b IMA: Add audit log for failure conditions by Lakshmi Ramasubramanian · 4 years, 7 months ago
  35. 4235b1a ima: fix mprotect checking by Mimi Zohar · 4 years, 7 months ago
  36. 8eb613c ima: verify mprotect change is consistent with mmap policy by Mimi Zohar · 4 years, 9 months ago
  37. e144d6b ima: Evaluate error in init_ima() by Roberto Sassu · 4 years, 10 months ago
  38. 555d6d7 integrity: Remove duplicate pr_fmt definitions by Tushar Sugandhi · 5 years ago
  39. 72ec611 IMA: Add log statements for failure conditions by Tushar Sugandhi · 5 years ago
  40. 6beea7a ima: add the ability to query the cached hash of a given file by Florent Revest · 5 years ago
  41. e9085e0 IMA: Add support to limit measuring keys by Lakshmi Ramasubramanian · 5 years ago
  42. c5563ba IMA: Check IMA policy flag by Lakshmi Ramasubramanian · 5 years ago
  43. 273df86 ima: Check against blacklisted hashes for files with modsig by Nayna Jain · 5 years ago
  44. e14555e ima: Make process_buffer_measurement() generic by Nayna Jain · 5 years ago
  45. aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
  46. 29d3c1c kexec: Allow kexec_file() with appropriate IMA policy when locked down by Matthew Garrett · 5 years ago
  47. 99d5cadf kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE by Jiri Bohac · 5 years ago
  48. e509225 ima: Store the measurement again when appraising a modsig by Thiago Jung Bauermann · 6 years ago
  49. 3878d50 ima: Define ima-modsig template by Thiago Jung Bauermann · 6 years ago
  50. 1558822 ima: Collect modsig by Thiago Jung Bauermann · 6 years ago
  51. 39b0709 ima: Implement support for module-style appended signatures by Thiago Jung Bauermann · 6 years ago
  52. 8b68150 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 6 years ago
  53. 86b4da8 IMA: Define a new template field buf by Prakhar Srivastava · 6 years ago
  54. b093512 IMA: Define a new hook to measure the kexec boot command line arguments by Prakhar Srivastava · 6 years ago
  55. 19453ce0 IMA: support for per policy rule template formats by Matthew Garrett · 6 years ago
  56. b169424 ima: use the lsm policy update notifier by Janne Karhunen · 6 years ago
  57. b886d83c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 by Thomas Gleixner · 6 years ago
  58. 2cd4737 ima: prevent a file already mmap'ed write to be mmap'ed execute by Mimi Zohar · 6 years ago
  59. fdb2410 ima: define ima_post_create_tmpfile() hook and add missing call by Mimi Zohar · 6 years ago
  60. f218a29 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
  61. b49d564 security: integrity: partial revert of make ima_main explicitly non-modular by Paul Gortmaker · 6 years ago
  62. 5580b4a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity by James Morris · 6 years ago
  63. eed9de3 ima: Use inode_is_open_for_write by Nikolay Borisov · 6 years ago
  64. 4f83d5e security: integrity: make ima_main explicitly non-modular by Paul Gortmaker · 6 years ago
  65. b5ca117 ima: prevent kexec_load syscall based on runtime secureboot flag by Nayna Jain · 6 years ago
  66. b2724d5 security/integrity: constify some read-only data by Eric Biggers · 6 years ago
  67. 92d4a03 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
  68. 4f0496d ima: based on policy warn about loading firmware (pre-allocated buffer) by Mimi Zohar · 7 years ago
  69. c77b8cd module: replace the existing LSM hook in init_module by Mimi Zohar · 7 years ago
  70. fed2512 ima: based on policy require signed firmware (sysfs fallback) by Mimi Zohar · 7 years ago
  71. 16c267a ima: based on policy require signed kexec kernel images by Mimi Zohar · 7 years ago
  72. 6035a27 IMA: don't propagate opened through the entire thing by Al Viro · 7 years ago
  73. b4df860 ima: use match_string() helper by Yisheng Xie · 7 years ago
  74. fd90bc5 ima: based on policy verify firmware signatures (pre-allocated buffer) by Mimi Zohar · 7 years ago
  75. 4ecd993 ima: Remove unused variable ima_initialized by Petr Vorel · 7 years ago
  76. ab60368 ima: Fallback to the builtin hash algorithm by Petr Vorel · 7 years ago
  77. 9e67028 ima: fail signature verification based on policy by Mimi Zohar · 7 years ago
  78. d77ccdc ima: re-evaluate files on privileged mounted filesystems by Mimi Zohar · 7 years ago
  79. d906c10 IMA: Support using new creds in appraisal policy by Matthew Garrett · 7 years ago
  80. c472c07 iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw} by Goffredo Baroncelli · 7 years ago
  81. 3c29548 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
  82. 3b370b2 IMA: switch IMA over to new i_version API by Jeff Layton · 7 years ago
  83. a2a2c3c ima: Use i_version only when filesystem supports it by Sascha Hauer · 7 years ago
  84. 9c655be ima: log message to module appraisal error by Bruno E. O. Meneguele · 7 years ago
  85. 4e8581e ima: pass filename to ima_rdwr_violation_check() by Roberto Sassu · 7 years ago
  86. da1b002 ima: support new "hash" and "dont_hash" policy actions by Mimi Zohar · 8 years ago
  87. ac0bf02 ima: Use i_version only when filesystem supports it by Sascha Hauer · 7 years ago
  88. 0d73a55 ima: re-introduce own integrity cache lock by Dmitry Kasatkin · 7 years ago
  89. 7c9bc09 ima: check signature enforcement against cmdline param instead of CONFIG by Bruno E. O. Meneguele · 7 years ago
  90. ebe7c0a ima: fix hash algorithm initialization by Boshi Wang · 7 years ago
  91. a7d3d03 integrity: use kernel_read_file_from_path() to read x509 certs by Christoph Hellwig · 7 years ago
  92. f3cc6b2 ima: always measure and audit files in policy by Mimi Zohar · 8 years ago
  93. 20f482a ima: allow to check MAY_APPEND by Lans Zhang · 8 years ago
  94. bc15ed6 ima: fix ima_d_path() possible race with rename by Mimi Zohar · 8 years ago
  95. 3f23d62 ima: store the builtin/custom template definitions in a list by Mimi Zohar · 8 years ago
  96. e71b9df ima: use file_dentry() by Miklos Szeredi · 8 years ago
  97. a422638 ima: change integrity cache to store measured pcr by Eric Richter · 9 years ago
  98. 14b1da8 ima: include pcr for each measurement log entry by Eric Richter · 9 years ago
  99. 725de7f ima: extend ima_get_action() to return the policy pcr by Eric Richter · 9 years ago
  100. 05d1a71 ima: add support for creating files using the mknodat syscall by Mimi Zohar · 9 years ago