summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_policy.c
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'fs.vfsuid.ima.v6.2-rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-12-211-0/+24
|\
| * mnt_idmapping: move ima-only helpers to imaChristian Brauner2022-12-131-0/+24
* | Merge tag 'integrity-v6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2022-12-131-16/+35
|\ \ | |/ |/|
| * ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua2022-11-021-9/+32
| * ima: Simplify ima_lsm_copy_ruleGUO Zihua2022-11-021-7/+3
* | ima: use type safe idmapping helpersChristian Brauner2022-10-261-16/+18
|/
* lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg2022-07-201-0/+4
* ima: support fs-verity file digest based version 3 signaturesMimi Zohar2022-05-051-8/+38
* ima: permit fsverity's file digests in the IMA measurement listMimi Zohar2022-05-051-1/+37
* Merge tag 'integrity-v5.18' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-03-211-2/+2
|\
| * ima: rename IMA_ACTION_FLAGS to IMA_NONACTION_FLAGSMimi Zohar2022-02-151-1/+1
| * ima: Fix trivial typos in the commentsAustin Kim2022-02-151-1/+1
* | Merge tag 'for-5.18/block-2022-03-18' of git://git.kernel.dk/linux-blockLinus Torvalds2022-03-211-1/+0
|\ \ | |/ |/|
| * block: remove genhd.hChristoph Hellwig2022-02-021-1/+0
* | ima: Do not print policy rule with inactive LSM labelsStefan Berger2022-02-021-0/+8
|/
* ima: Use strscpy instead of strlcpyPetr Vorel2021-10-091-1/+1
* ima_policy: Remove duplicate 'the' in docs commentPetr Vorel2021-10-091-2/+1
* ima: add gid supportCurtis Veit2021-10-091-27/+174
* ima: fix uid code style problemsAlex Henrie2021-10-091-4/+6
* ima: fix deadlock when traversing "ima_default_rules".liqiong2021-10-091-9/+18
* IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithmsTHOBY Simon2021-08-161-0/+6
* IMA: introduce a new policy option func=SETXATTR_CHECKTHOBY Simon2021-08-161-10/+66
* IMA: add a policy option to restrict xattr hash algorithms on appraisalTHOBY Simon2021-08-161-4/+70
* IMA: add support to restrict the hash algorithms used for file appraisalTHOBY Simon2021-08-161-2/+16
* ima: Fix fall-through warnings for ClangGustavo A. R. Silva2021-04-201-0/+2
* Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2021-02-231-8/+12
|\
| * ima: handle idmapped mountsChristian Brauner2021-01-241-8/+12
* | IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian2021-01-141-0/+12
* | IMA: limit critical data measurement based on a labelTushar Sugandhi2021-01-141-3/+34
* | IMA: add policy rule to measure critical dataTushar Sugandhi2021-01-141-4/+25
* | IMA: generalize keyring specific measurement constructsTushar Sugandhi2021-01-141-17/+26
|/
* ima: select ima-buf template for buffer measurementLakshmi Ramasubramanian2020-11-201-1/+1
* Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-10-151-51/+102
|\
| * ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar2020-09-151-5/+4
| * integrity: invalid kernel parameters feedbackBruno Meneguele2020-09-081-0/+2
| * ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks2020-08-311-2/+4
| * ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks2020-08-311-45/+93
* | fs/kernel_read_file: Split into separate include fileScott Branden2020-10-051-0/+1
* | treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2020-08-231-4/+4
|/
* ima: Rename internal filter rule functionsTyler Hicks2020-07-201-17/+13
* ima: Support additional conditionals in the KEXEC_CMDLINE hook functionTyler Hicks2020-07-201-11/+6
* ima: Use the common function to detect LSM conditionals in a ruleTyler Hicks2020-07-201-9/+2
* ima: Move comprehensive rule validation checks out of the token parserTyler Hicks2020-07-201-20/+37
* ima: Use correct type for the args_p member of ima_rule_entry.lsm elementsTyler Hicks2020-07-201-9/+9
* ima: Shallow copy the args_p member of ima_rule_entry.lsm elementsTyler Hicks2020-07-201-10/+8
* ima: Fail rule parsing when appraise_flag=blacklist is unsupportableTyler Hicks2020-07-201-1/+14
* ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid condTyler Hicks2020-07-161-0/+7
* ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invali...Tyler Hicks2020-07-161-0/+21
* ima: Fail rule parsing when buffer hook functions have an invalid actionTyler Hicks2020-07-161-2/+38
* ima: Free the entire rule if it fails to parseTyler Hicks2020-07-161-1/+2