summaryrefslogtreecommitdiffstats
path: root/security/integrity
Commit message (Expand)AuthorAgeFilesLines
* ima: fix hash algorithm initializationBoshi Wang2017-12-091-0/+4
* ima: do not update security.ima if appraisal status is not INTEGRITY_PASSRoberto Sassu2017-11-241-0/+3
* ima: accept previously set IMA_NEW_FILEDaniel Glöckner2017-05-251-2/+3
* ima: fix ima_d_path() possible race with renameMimi Zohar2017-03-123-6/+24
* ima: fix memory leak in ima_release_policyEric Richter2017-01-121-1/+1
* Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds2016-10-103-16/+16
|\
| * xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher2016-10-073-16/+16
* | ima: use file_dentry()Miklos Szeredi2016-09-162-3/+3
|/
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-07-2910-30/+80
|\
| * ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
| * ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
| * ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
| * ima: change ima_measurements_show() to display the entry specific pcrEric Richter2016-06-301-5/+4
| * ima: include pcr for each measurement log entryEric Richter2016-06-304-8/+13
| * ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-305-7/+14
| * ima: add policy support for extending different pcrsEric Richter2016-06-301-1/+28
| * integrity: add measured_pcrs field to integrity cacheEric Richter2016-06-302-0/+3
* | evm: Translate user/group ids relative to s_user_ns when computing HMACSeth Forshee2016-07-051-2/+2
|/
* security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatAndy Shevchenko2016-05-201-12/+2
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-05-198-37/+73
|\
| * Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-05-065-35/+42
| |\
| | * Merge branch 'keys-trust' into keys-nextDavid Howells2016-05-044-34/+42
| | |\
| | | * IMA: Use the the system trusted keyrings instead of .ima_mokDavid Howells2016-04-114-53/+32
| | | * KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTEDDavid Howells2016-04-111-2/+1
| | | * KEYS: Move the point of trust determination to __key_link()David Howells2016-04-112-4/+35
| | | * KEYS: Add a facility to restrict new links into a keyringDavid Howells2016-04-112-8/+7
| | * | security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSAAndreas Ziegler2016-04-121-1/+0
| | |/
| * | ima: add support for creating files using the mknodat syscallMimi Zohar2016-05-012-1/+29
| * | ima: fix ima_inode_post_setattrMimi Zohar2016-05-012-1/+2
| |/
* | Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2016-05-172-2/+2
|\ \
| * | constify ima_d_path()Al Viro2016-03-282-2/+2
| |/
* | Merge branch 'ovl-fixes' into for-linusAl Viro2016-05-171-2/+2
|\ \
| * | ima: fix the string representation of the LSM/IMA hook enumeration orderingMimi Zohar2016-05-041-2/+2
| |/
* | ->getxattr(): pass dentry and inode as separate argumentsAl Viro2016-04-111-1/+1
* | don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro2016-04-101-2/+2
|/
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-03-1714-158/+409
|\
| * Merge tag 'keys-next-20160303' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-03-043-11/+9
| |\
| | * X.509: Make algo identifiers text instead of enumDavid Howells2016-03-032-4/+5
| | * akcipher: Move the RSA DER encoding check to the crypto layerDavid Howells2016-03-031-0/+1
| | * integrity: convert digsig to akcipher apiTadeusz Struk2016-02-182-7/+4
| | * KEYS: CONFIG_KEYS_DEBUG_PROC_KEYS is no longer an optionDavid Howells2016-02-101-1/+0
| * | ima: require signed IMA policyMimi Zohar2016-02-211-0/+7
| * | ima: measure and appraise the IMA policy itselfMimi Zohar2016-02-214-3/+24
| * | ima: load policy using pathDmitry Kasatkin2016-02-211-2/+43
| * | ima: support for kexec image and initramfsMimi Zohar2016-02-213-7/+27
| * | ima: remove firmware and module specific cached status infoMimi Zohar2016-02-215-39/+28
| * | module: replace copy_module_from_fd with kernel versionMimi Zohar2016-02-211-22/+13
| * | security: define kernel_read_file hookMimi Zohar2016-02-211-0/+16
| * | firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar2016-02-211-11/+10
| * | ima: define a new hook to measure and appraise a file already in memoryMimi Zohar2016-02-206-14/+51