summaryrefslogtreecommitdiffstats
path: root/security/integrity/evm/evm_main.c
Commit message (Expand)AuthorAgeFilesLines
* evm: Allow non-SHA1 digital signaturesMatthew Garrett2018-07-181-7/+12
* EVM: Allow runtime modification of the set of verified xattrsMatthew Garrett2018-05-181-3/+3
* EVM: turn evm_config_xattrnames into a listMatthew Garrett2018-05-181-33/+46
* evm: check for remount ro in progress before writingSascha Hauer2018-03-251-2/+6
* evm: Constify *integrity_status_msg[]Hernán Gonzalez2018-03-231-1/+1
* evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.cHernán Gonzalez2018-03-231-2/+0
* EVM: Add support for portable signature formatMatthew Garrett2017-12-111-10/+19
* EVM: Allow userland to permit modification of EVM-protected metadataMatthew Garrett2017-12-111-7/+31
* EVM: Include security.apparmor in EVM measurementsMatthew Garrett2017-11-081-0/+3
* sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sche...Ingo Molnar2017-03-021-0/+2
* security/integrity: Harden against malformed xattrsSeth Forshee2016-11-131-0/+4
* xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher2016-10-071-2/+2
* ->getxattr(): pass dentry and inode as separate argumentsAl Viro2016-04-111-1/+1
* don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro2016-04-101-2/+2
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2016-02-121-1/+2
* evm: reset EVM status when file attributes changeDmitry Kasatkin2015-12-151-0/+13
* evm: enable EVM when X509 certificate is loadedDmitry Kasatkin2015-12-151-1/+5
* evm: load an x509 certificate from the kernelDmitry Kasatkin2015-12-151-0/+7
* integrity: define '.evm' as a builtin 'trusted' keyringDmitry Kasatkin2015-11-231-3/+5
* evm: fix potential race when removing xattrsDmitry Kasatkin2015-05-211-4/+3
* evm: labeling pseudo filesystems exceptionMimi Zohar2015-05-211-0/+11
* VFS: security/: d_backing_inode() annotationsDavid Howells2015-04-151-9/+9
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2014-12-141-3/+8
|\
| * evm: skip replacing EVM signature with HMAC on read-only filesystemDmitry Kasatkin2014-10-071-3/+8
* | evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin2014-10-281-3/+6
|/
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-09-091-0/+7
* evm: prevent passing integrity check if xattr read failsDmitry Kasatkin2014-09-081-3/+4
* evm: fix checkpatch warningsDmitry Kasatkin2014-09-021-3/+0
* evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-121-2/+10
* evm: provide option to protect additional SMACK xattrsDmitry Kasatkin2014-06-121-0/+5
* evm: replace HMAC version with attribute maskDmitry Kasatkin2014-06-121-1/+11
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2014-04-121-1/+1
|\
| * get rid of pointless checks for NULL ->i_opAl Viro2014-04-011-1/+1
* | security: integrity: Use a more current logging styleJoe Perches2014-03-071-2/+4
|/
* ima: pass full xattr with the signatureDmitry Kasatkin2013-10-251-2/+2
* xattr: Constify ->name member of "struct xattr".Tetsuo Handa2013-07-251-1/+1
* evm: audit integrity metadata failuresMimi Zohar2013-06-201-1/+14
* evm: add file system uuid to EVM hmacDmitry Kasatkin2013-02-061-0/+1
* evm: remove unused cleanup functionsDmitry Kasatkin2013-01-161-9/+0
* ima: integrity appraisal extensionMimi Zohar2012-09-071-0/+3
* evm: digital signature verification supportDmitry Kasatkin2011-11-091-13/+81
* evm: permit mode bits to be updatedMimi Zohar2011-09-141-17/+13
* evm: posix acls modify i_modeMimi Zohar2011-09-141-5/+19
* evm: limit verifying current security.evm integrityMimi Zohar2011-09-141-34/+24
* evm: fix evm_inode_init_security return codeMimi Zohar2011-08-111-1/+1
* evm: add evm_inode_setattr to prevent updating an invalid security.evmMimi Zohar2011-07-181-0/+15
* evm: permit only valid security.evm xattrs to be updatedMimi Zohar2011-07-181-14/+63
* evm: replace hmac_status with evm_statusDmitry Kasatkin2011-07-181-7/+7
* evm: evm_verify_hmac must not return INTEGRITY_UNKNOWNDmitry Kasatkin2011-07-181-6/+5
* evm: additional parameter to pass integrity cache entry 'iint'Dmitry Kasatkin2011-07-181-10/+8