summaryrefslogtreecommitdiffstats
path: root/security/integrity/platform_certs
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'tpmdd-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkk...Linus Torvalds2023-08-294-5/+80
|\
| * integrity: PowerVM support for loading third party code signing keysNayna Jain2023-08-173-0/+30
| * integrity: check whether imputed trust is enabledNayna Jain2023-08-172-3/+18
| * integrity: remove global variable from machine_keyring.cNayna Jain2023-08-171-2/+2
| * integrity: ignore keys failing CA restrictions on non-UEFI platformNayna Jain2023-08-171-1/+1
| * integrity: PowerVM support for loading CA keys on machine keyringNayna Jain2023-08-173-0/+30
* | s390/ipl: fix virtual vs physical address confusionAlexander Gordeev2023-08-181-2/+2
|/
* security/integrity: fix pointer to ESL data and its size on pseriesNayna Jain2023-06-211-14/+26
* integrity/powerpc: Support loading keys from PLPKSRussell Currey2023-02-131-7/+10
* integrity/powerpc: Improve error handling & reporting when loading certsRussell Currey2023-02-131-6/+20
* powerpc/secvar: Use u64 in secvar_operationsMichael Ellerman2023-02-121-2/+2
* efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg2022-11-011-0/+1
* efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain2022-09-301-1/+1
* Merge tag 'integrity-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-05-243-3/+44
|\
| * integrity: Fix sparse warnings in keyring_handlerStefan Berger2022-05-161-3/+3
| * efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg2022-05-152-0/+41
* | certs: Factor out the blacklist hash creationMickaël Salaün2022-05-231-24/+2
|/
* integrity: Only use machine keyring when uefi_check_trust_mok_keys is trueEric Snowberg2022-03-082-1/+17
* integrity: Trust MOK keys if MokListTrustedRT foundEric Snowberg2022-03-081-0/+19
* integrity: add new keyring handler for mok keysEric Snowberg2022-03-083-3/+23
* integrity: Introduce a Linux keyring called machineEric Snowberg2022-03-081-0/+42
* integrity: Fix warning about missing prototypesEric Snowberg2022-03-081-0/+1
* integrity: Do not load MOK and MOKx when secure boot be disabledLee, Chun-Yi2021-12-241-0/+5
* efi: Don't use knowledge about efi_guid_t internalsAndy Shevchenko2021-08-271-1/+1
* integrity: Load mokx variables into the blacklist keyringEric Snowberg2021-03-111-2/+18
* certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg2021-03-111-0/+11
* integrity: Load certs from the EFI MOK config tableLenny Szubowicz2020-09-161-0/+22
* integrity: Move import of MokListRT certs to a separate routineLenny Szubowicz2020-09-161-19/+44
* Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi...Ingo Molnar2020-02-261-1/+1
|\
| * integrity: Check properly whether EFI GetVariable() is availableArd Biesheuvel2020-02-231-1/+1
* | efi: Only print errors about failing to get certs if EFI vars are foundJavier Martinez Canillas2020-02-181-14/+26
|/
* x86/efi: remove unused variablesYueHaibing2019-11-291-5/+0
* powerpc: Load firmware trusted keys/hashes into kernel keyringNayna Jain2019-11-131-0/+96
* x86/efi: move common keyring handler functions to new fileNayna Jain2019-11-133-66/+113
* Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2019-07-101-10/+4
* keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells2019-06-271-4/+10
* s390/ipl: read IPL report at early bootMartin Schwidefsky2019-04-261-0/+36
* efi: Allow the "db" UEFI variable to be suppressedJosh Boyer2018-12-121-10/+35
* efi: Import certificates from UEFI Secure BootJosh Boyer2018-12-121-0/+169
* efi: Add an EFI signature blob parserDave Howells2018-12-121-0/+108
* integrity: Load certs to the platform keyringNayna Jain2018-12-121-0/+23
* integrity: Define a trusted platform keyringNayna Jain2018-12-121-0/+35