summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_main.c
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'integrity-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-12-161-15/+10
|\
| * ima: select ima-buf template for buffer measurementLakshmi Ramasubramanian2020-11-201-15/+9
| * ima: defer arch_ima_get_secureboot() call to IMA init timeArd Biesheuvel2020-11-021-0/+1
* | ima: Implement ima_inode_hashKP Singh2020-11-261-24/+54
|/
* Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-10-151-4/+19
|\
| * ima: Fix NULL pointer dereference in ima_file_hashKP Singh2020-09-161-0/+10
| * integrity: invalid kernel parameters feedbackBruno Meneguele2020-09-081-4/+9
* | IMA: Add support for file reads without contentsScott Branden2020-10-051-6/+16
* | LSM: Add "contents" flag to kernel_read_file hookKees Cook2020-10-051-1/+9
* | firmware_loader: Use security_post_load_data()Kees Cook2020-10-051-10/+10
* | LSM: Introduce kernel_post_load_data() hookKees Cook2020-10-051-1/+23
* | fs/kernel_read_file: Split into separate include fileScott Branden2020-10-051-0/+1
* | fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook2020-10-051-4/+2
|/
* ima: Support additional conditionals in the KEXEC_CMDLINE hook functionTyler Hicks2020-07-201-6/+17
* IMA: Add audit log for failure conditionsLakshmi Ramasubramanian2020-07-161-5/+13
* ima: fix mprotect checkingMimi Zohar2020-06-121-1/+2
* ima: verify mprotect change is consistent with mmap policyMimi Zohar2020-05-221-0/+51
* ima: Evaluate error in init_ima()Roberto Sassu2020-04-191-0/+3
* integrity: Remove duplicate pr_fmt definitionsTushar Sugandhi2020-02-281-2/+0
* IMA: Add log statements for failure conditionsTushar Sugandhi2020-02-281-0/+3
* ima: add the ability to query the cached hash of a given fileFlorent Revest2020-01-221-0/+49
* IMA: Add support to limit measuring keysLakshmi Ramasubramanian2019-12-121-4/+5
* IMA: Check IMA policy flagLakshmi Ramasubramanian2019-12-121-0/+3
* ima: Check against blacklisted hashes for files with modsigNayna Jain2019-11-121-4/+8
* ima: Make process_buffer_measurement() genericNayna Jain2019-11-121-18/+40
* Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2019-09-281-2/+2
|\
| * kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett2019-08-191-1/+1
| * kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac2019-08-191-1/+1
* | ima: Store the measurement again when appraising a modsigThiago Jung Bauermann2019-08-051-3/+12
* | ima: Define ima-modsig templateThiago Jung Bauermann2019-08-051-1/+1
* | ima: Collect modsigThiago Jung Bauermann2019-08-051-1/+1
* | ima: Implement support for module-style appended signaturesThiago Jung Bauermann2019-08-051-2/+9
* | Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-07-081-6/+117
|\ \ | |/ |/|
| * IMA: Define a new template field bufPrakhar Srivastava2019-06-301-1/+3
| * IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava2019-06-241-0/+72
| * IMA: support for per policy rule template formatsMatthew Garrett2019-06-191-4/+5
| * ima: use the lsm policy update notifierJanne Karhunen2019-06-141-0/+8
| * ima: prevent a file already mmap'ed write to be mmap'ed executeMimi Zohar2019-06-041-2/+30
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
|/
* ima: define ima_post_create_tmpfile() hook and add missing callMimi Zohar2019-02-041-2/+33
* Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-01-021-7/+14
|\
| * Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...James Morris2018-12-171-7/+14
| |\
| | * ima: Use inode_is_open_for_writeNikolay Borisov2018-12-121-1/+1
| | * ima: prevent kexec_load syscall based on runtime secureboot flagNayna Jain2018-12-111-6/+13
* | | security: integrity: partial revert of make ima_main explicitly non-modularPaul Gortmaker2018-12-201-1/+1
|/ /
* / security: integrity: make ima_main explicitly non-modularPaul Gortmaker2018-12-121-4/+3
|/
* security/integrity: constify some read-only dataEric Biggers2018-10-101-1/+1
* Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2018-08-151-14/+54
|\
| * ima: based on policy warn about loading firmware (pre-allocated buffer)Mimi Zohar2018-07-161-0/+8
| * module: replace the existing LSM hook in init_moduleMimi Zohar2018-07-161-13/+10