- 840e5bb Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 3 months ago
- 726eb70 Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc by Linus Torvalds · 4 years, 3 months ago
- 39a5101 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 4 years, 3 months ago
- e6412f9 Merge tag 'efi-core-2020-10-12' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 4 years, 3 months ago
- 0fa8e08 fs/kernel_file_read: Add "offset" arg for partial reads by Kees Cook · 4 years, 4 months ago
- 34736da IMA: Add support for file reads without contents by Scott Branden · 4 years, 4 months ago
- 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 4 months ago
- 4f2d99b firmware_loader: Use security_post_load_data() by Kees Cook · 4 years, 4 months ago
- b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 4 months ago
- 8853528 fs/kernel_read_file: Add file_size output argument by Kees Cook · 4 years, 4 months ago
- 113eeb5 fs/kernel_read_file: Switch buffer size arg to size_t by Kees Cook · 4 years, 4 months ago
- f7a4f68 fs/kernel_read_file: Remove redundant size argument by Kees Cook · 4 years, 4 months ago
- b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 4 months ago
- c307459 fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum by Kees Cook · 4 years, 4 months ago
- 0b7e44d integrity: Asymmetric digsig supports SM2-with-SM3 algorithm by Tianjia Zhang · 4 years, 4 months ago
- aa662fc ima: Fix NULL pointer dereference in ima_file_hash by KP Singh · 4 years, 4 months ago
- 726bd89 integrity: Load certs from the EFI MOK config table by Lenny Szubowicz · 4 years, 4 months ago
- 38a1f03 integrity: Move import of MokListRT certs to a separate routine by Lenny Szubowicz · 4 years, 4 months ago
- 455b6c9 evm: Check size of security.evm before using it by Roberto Sassu · 4 years, 4 months ago
- 4be92db ima: Remove semicolon at the end of ima_get_binary_runtime_size() by Roberto Sassu · 4 years, 4 months ago
- 60386b8 ima: Don't ignore errors from crypto_shash_update() by Roberto Sassu · 4 years, 4 months ago
- f60c826 ima: Use kmemdup rather than kmalloc+memcpy by Alex Dewar · 4 years, 4 months ago
- 8c2f516 integrity: include keyring name for unknown key request by Bruno Meneguele · 4 years, 4 months ago
- e4d7e2d ima: limit secure boot feedback scope for appraise by Bruno Meneguele · 4 years, 4 months ago
- 7fe2bb7 integrity: invalid kernel parameters feedback by Bruno Meneguele · 4 years, 4 months ago
- 4afb28a ima: add check for enforced appraise option by Bruno Meneguele · 4 years, 4 months ago
- e44f128 integrity: Use current_uid() in integrity_audit_message() by Denis Efremov · 4 years, 5 months ago
- 48ce1dd ima: Fail rule parsing when asymmetric key measurement isn't supportable by Tyler Hicks · 4 years, 5 months ago
- 176377d ima: Pre-parse the list of keyrings in a KEY_CHECK rule by Tyler Hicks · 4 years, 5 months ago
- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 5 months ago
- ce13266 Merge tag 'for-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 4 years, 5 months ago
- c9fecf5 Replace HTTP links with HTTPS ones: security by Alexander A. Klimov · 4 years, 7 months ago
- 4cec929 Merge tag 'integrity-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 5 months ago
- 3db0d0c integrity: remove redundant initialization of variable ret by Colin Ian King · 4 years, 7 months ago
- 311aa6a ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtime by Bruno Meneguele · 4 years, 6 months ago
- 1768215 ima: AppArmor satisfies the audit rule requirements by Tyler Hicks · 4 years, 7 months ago
- b8867ee ima: Rename internal filter rule functions by Tyler Hicks · 4 years, 6 months ago
- 4834177 ima: Support additional conditionals in the KEXEC_CMDLINE hook function by Tyler Hicks · 4 years, 6 months ago
- 592b24c ima: Use the common function to detect LSM conditionals in a rule by Tyler Hicks · 4 years, 6 months ago
- 30031b0 ima: Move comprehensive rule validation checks out of the token parser by Tyler Hicks · 4 years, 6 months ago
- aa0c022 ima: Use correct type for the args_p member of ima_rule_entry.lsm elements by Tyler Hicks · 4 years, 6 months ago
- 39e5993 ima: Shallow copy the args_p member of ima_rule_entry.lsm elements by Tyler Hicks · 4 years, 6 months ago
- 5f3e926 ima: Fail rule parsing when appraise_flag=blacklist is unsupportable by Tyler Hicks · 4 years, 6 months ago
- eb624fe ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid cond by Tyler Hicks · 4 years, 6 months ago
- db2045f ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invalid cond by Tyler Hicks · 4 years, 6 months ago
- 71218343 ima: Fail rule parsing when buffer hook functions have an invalid action by Tyler Hicks · 4 years, 6 months ago
- 2bdd737 ima: Free the entire rule if it fails to parse by Tyler Hicks · 4 years, 6 months ago
- 465aee7 ima: Free the entire rule when deleting a list of rules by Tyler Hicks · 4 years, 6 months ago
- 9ff8a61 ima: Have the LSM free its audit rule by Tyler Hicks · 4 years, 6 months ago
- 34e980b IMA: Add audit log for failure conditions by Lakshmi Ramasubramanian · 4 years, 7 months ago
- 2f84588 integrity: Add errno field in audit message by Lakshmi Ramasubramanian · 4 years, 7 months ago
- a1f9b1c integrity/ima: switch to using __kernel_read by Christoph Hellwig · 4 years, 8 months ago
- 20c59ce ima: extend boot_aggregate with kernel measurements by Maurizio Drocco · 4 years, 7 months ago
- eb492c6 ima: Replace zero-length array with flexible-array by Gustavo A. R. Silva · 4 years, 8 months ago
- 923ea16 Merge tag 'integrity-v5.8-fix' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 4235b1a ima: fix mprotect checking by Mimi Zohar · 4 years, 7 months ago
- 8b8c704 ima: Remove __init annotation from ima_pcrread() by Roberto Sassu · 4 years, 7 months ago
- 3c0ad98 Merge tag 'integrity-v5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 42413b4 ima: Directly free *entry in ima_alloc_init_template() if digests is NULL by Roberto Sassu · 4 years, 8 months ago
- 6cc7c26 ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() by Roberto Sassu · 4 years, 8 months ago
- 067a436 ima: Directly assign the ima_default_policy pointer to ima_rules by Roberto Sassu · 4 years, 8 months ago
- 8eb613c ima: verify mprotect change is consistent with mmap policy by Mimi Zohar · 4 years, 9 months ago
- 8433856 evm: Fix a small race in init_desc() by Dan Carpenter · 4 years, 8 months ago
- 0c4395f evm: Fix possible memory leak in evm_calc_hmac_or_hash() by Roberto Sassu · 4 years, 9 months ago
- b59fda4 ima: Set again build_ima_appraise variable by Krzysztof Struczynski · 4 years, 9 months ago
- 6ee2844 ima: Remove redundant policy rule set in add_rules() by Krzysztof Struczynski · 4 years, 9 months ago
- 1129d31 ima: Fix ima digest hash table key calculation by Krzysztof Struczynski · 4 years, 9 months ago
- 770f605 evm: Fix RCU list related warnings by Madhuparna Bhowmik · 4 years, 9 months ago
- 2e3a34e ima: Fix return value of ima_write_policy() by Roberto Sassu · 4 years, 9 months ago
- 53de3b0 evm: Check also if *tfm is an error pointer in init_desc() by Roberto Sassu · 4 years, 9 months ago
- 0014cc0 ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() by Roberto Sassu · 4 years, 9 months ago
- 2592677 ima: Use ima_hash_algo for collision detection in the measurement list by Roberto Sassu · 4 years, 10 months ago
- 1ea973d ima: Calculate and extend PCR with digests in ima_template_entry by Roberto Sassu · 4 years, 10 months ago
- 6d94809 ima: Allocate and initialize tfm for each PCR bank by Roberto Sassu · 4 years, 10 months ago
- aa724fe ima: Switch to dynamically allocated buffer for template digests by Roberto Sassu · 4 years, 10 months ago
- 7ca7964 ima: Store template digest directly in ima_template_entry by Roberto Sassu · 4 years, 10 months ago
- e144d6b ima: Evaluate error in init_ima() by Roberto Sassu · 4 years, 10 months ago
- 6f1a1d1 ima: Switch to ima_hash_algo for boot aggregate by Roberto Sassu · 4 years, 10 months ago
- 7f21831 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 10 months ago
- 9e2b4be ima: add a new CONFIG for loading arch-specific policies by Nayna Jain · 4 years, 10 months ago
- 555d6d7 integrity: Remove duplicate pr_fmt definitions by Tushar Sugandhi · 5 years ago
- 72ec611 IMA: Add log statements for failure conditions by Tushar Sugandhi · 5 years ago
- e2bf681 IMA: Update KBUILD_MODNAME for IMA files to ima by Tushar Sugandhi · 5 years ago
- e976568 Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi into efi/core by Ingo Molnar · 5 years ago
- 6b75d54 integrity: Check properly whether EFI GetVariable() is available by Ard Biesheuvel · 5 years ago
- 5780b9a ima: add sm3 algorithm to hash algorithm configuration list by Tianjia Zhang · 5 years ago
- 3be54d5 efi: Only print errors about failing to get certs if EFI vars are found by Javier Martinez Canillas · 5 years ago
- 73a0bff Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 5 years ago
- 5b3014b IMA: Defined delayed workqueue to free the queued keys by Lakshmi Ramasubramanian · 5 years ago
- 450d0fd IMA: Call workqueue functions to measure queued keys by Lakshmi Ramasubramanian · 5 years ago
- 9f81a2e IMA: Define workqueue for early boot key measurements by Lakshmi Ramasubramanian · 5 years ago
- 5c7bac9 IMA: pre-allocate buffer to hold keyrings string by Lakshmi Ramasubramanian · 5 years ago
- 483ec26 ima: ima/lsm policy rule loading logic bug fixes by Janne Karhunen · 5 years ago
- 6beea7a ima: add the ability to query the cached hash of a given file by Florent Revest · 5 years ago
- 5350ceb ima: Add a space after printing LSM rules for readability by Clay Chang · 5 years ago
- ea78979 IMA: fix measuring asymmetric keys Kconfig by Lakshmi Ramasubramanian · 5 years ago
- 2b60c0e IMA: Read keyrings= option from the IMA policy by Lakshmi Ramasubramanian · 5 years ago
- e9085e0 IMA: Add support to limit measuring keys by Lakshmi Ramasubramanian · 5 years ago
- 88e70da IMA: Define an IMA hook to measure keys by Lakshmi Ramasubramanian · 5 years ago
- 5808611 IMA: Add KEY_CHECK func to measure keys by Lakshmi Ramasubramanian · 5 years ago