summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_policy.c
Commit message (Expand)AuthorAgeFilesLines
* ima: Make it independent from 'integrity' LSMRoberto Sassu2024-02-151-1/+1
* Merge tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2023-08-301-12/+5
|\
| * integrity: Always reference the blacklist keyring with appraisalEric Snowberg2023-08-011-12/+5
* | integrity: Annotate struct ima_rule_opt_list with __counted_byKees Cook2023-08-181-2/+2
|/
* ima: Fix build warningsRoberto Sassu2023-06-061-1/+2
* Merge tag 'integrity-v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2023-02-221-1/+6
|\
| * ima: Introduce MMAP_CHECK_REQPROT hookRoberto Sassu2023-01-311-0/+4
| * ima: fix ima_delete_rules() kernel-doc warningRandy Dunlap2023-01-181-1/+2
* | fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner2023-01-191-3/+2
* | fs: port xattr to mnt_idmapChristian Brauner2023-01-191-5/+6
|/
* Merge tag 'fs.vfsuid.ima.v6.2-rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-12-211-0/+24
|\
| * mnt_idmapping: move ima-only helpers to imaChristian Brauner2022-12-131-0/+24
* | Merge tag 'integrity-v6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2022-12-131-16/+35
|\ \ | |/ |/|
| * ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua2022-11-021-9/+32
| * ima: Simplify ima_lsm_copy_ruleGUO Zihua2022-11-021-7/+3
* | ima: use type safe idmapping helpersChristian Brauner2022-10-261-16/+18
|/
* lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg2022-07-201-0/+4
* ima: support fs-verity file digest based version 3 signaturesMimi Zohar2022-05-051-8/+38
* ima: permit fsverity's file digests in the IMA measurement listMimi Zohar2022-05-051-1/+37
* Merge tag 'integrity-v5.18' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-03-211-2/+2
|\
| * ima: rename IMA_ACTION_FLAGS to IMA_NONACTION_FLAGSMimi Zohar2022-02-151-1/+1
| * ima: Fix trivial typos in the commentsAustin Kim2022-02-151-1/+1
* | Merge tag 'for-5.18/block-2022-03-18' of git://git.kernel.dk/linux-blockLinus Torvalds2022-03-211-1/+0
|\ \ | |/ |/|
| * block: remove genhd.hChristoph Hellwig2022-02-021-1/+0
* | ima: Do not print policy rule with inactive LSM labelsStefan Berger2022-02-021-0/+8
|/
* ima: Use strscpy instead of strlcpyPetr Vorel2021-10-091-1/+1
* ima_policy: Remove duplicate 'the' in docs commentPetr Vorel2021-10-091-2/+1
* ima: add gid supportCurtis Veit2021-10-091-27/+174
* ima: fix uid code style problemsAlex Henrie2021-10-091-4/+6
* ima: fix deadlock when traversing "ima_default_rules".liqiong2021-10-091-9/+18
* IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithmsTHOBY Simon2021-08-161-0/+6
* IMA: introduce a new policy option func=SETXATTR_CHECKTHOBY Simon2021-08-161-10/+66
* IMA: add a policy option to restrict xattr hash algorithms on appraisalTHOBY Simon2021-08-161-4/+70
* IMA: add support to restrict the hash algorithms used for file appraisalTHOBY Simon2021-08-161-2/+16
* ima: Fix fall-through warnings for ClangGustavo A. R. Silva2021-04-201-0/+2
* Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2021-02-231-8/+12
|\
| * ima: handle idmapped mountsChristian Brauner2021-01-241-8/+12
* | IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian2021-01-141-0/+12
* | IMA: limit critical data measurement based on a labelTushar Sugandhi2021-01-141-3/+34
* | IMA: add policy rule to measure critical dataTushar Sugandhi2021-01-141-4/+25
* | IMA: generalize keyring specific measurement constructsTushar Sugandhi2021-01-141-17/+26
|/
* ima: select ima-buf template for buffer measurementLakshmi Ramasubramanian2020-11-201-1/+1
* Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-10-151-51/+102
|\
| * ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar2020-09-151-5/+4
| * integrity: invalid kernel parameters feedbackBruno Meneguele2020-09-081-0/+2
| * ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks2020-08-311-2/+4
| * ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks2020-08-311-45/+93
* | fs/kernel_read_file: Split into separate include fileScott Branden2020-10-051-0/+1
* | treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2020-08-231-4/+4
|/
* ima: Rename internal filter rule functionsTyler Hicks2020-07-201-17/+13