summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_policy.c
Commit message (Expand)AuthorAgeFilesLines
* IMA: Add KEY_CHECK func to measure keysLakshmi Ramasubramanian2019-12-121-1/+3
* ima: Check against blacklisted hashes for files with modsigNayna Jain2019-11-121-2/+10
* Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2019-09-281-0/+50
|\
| * kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett2019-08-191-0/+50
* | ima: Define ima-modsig templateThiago Jung Bauermann2019-08-051-0/+41
* | ima: Implement support for module-style appended signaturesThiago Jung Bauermann2019-08-051-6/+6
* | ima: Add modsig appraise_type option for module-style appended signaturesThiago Jung Bauermann2019-08-051-2/+10
* | ima: initialize the "template" field with the default templateMimi Zohar2019-08-011-2/+4
* | Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-07-081-23/+140
|\ \ | |/ |/|
| * IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava2019-06-241-0/+7
| * IMA: support for per policy rule template formatsMatthew Garrett2019-06-191-2/+36
| * ima: use the lsm policy update notifierJanne Karhunen2019-06-141-20/+96
| * ima: Make arch_policy_entry staticYueHaibing2019-06-141-1/+1
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-051-5/+1
|/
* ima: show rules with IMA_INMASK correctlyRoberto Sassu2019-05-291-9/+12
* ima: fix wrong signed policy requirement when not appraisingPetr Vorel2019-05-191-3/+4
* Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-03-071-4/+2
|\
| * audit: remove unused actx param from audit_rule_matchRichard Guy Briggs2019-01-311-4/+2
* | security: mark expected switch fall-throughs and add a missing breakGustavo A. R. Silva2019-02-221-0/+4
|/
* Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-01-021-43/+128
|\
| * Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...James Morris2018-12-171-43/+128
| |\
| | * ima: don't measure/appraise files on efivarfsMimi Zohar2018-12-111-1/+3
| | * ima: add support for arch specific policiesNayna Jain2018-12-111-2/+70
| | * ima: refactor ima_init_policy()Nayna Jain2018-12-111-41/+56
* | | Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2018-12-271-1/+1
|\| |
| * | security: audit and remove any unnecessary uses of module.hPaul Gortmaker2018-12-121-1/+1
| |/
* / ima: cleanup the match_token policy codeMimi Zohar2018-12-171-5/+5
|/
* ima: Differentiate auditing policy rules from "audit" actionsStefan Berger2018-07-181-2/+2
* ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not setStefan Berger2018-07-181-1/+5
* ima: Use audit_log_format() rather than audit_log_string()Stefan Berger2018-07-181-2/+1
* ima: Call audit_log_string() rather than logging it untrustedStefan Berger2018-07-181-1/+1
* ima: add build time policyMimi Zohar2018-07-161-3/+43
* ima: based on policy require signed kexec kernel imagesMimi Zohar2018-07-161-0/+2
* IMA: use list_splice_tail_init_rcu() instead of its open coded variantPetko Manolov2018-05-311-15/+2
* ima: fix updating the ima_appraise flagMimi Zohar2018-05-221-9/+19
* ima: define a new policy condition based on the filesystem nameMimi Zohar2018-05-221-1/+24
* ima: Add smackfs to the default appraise/measure listMartin Townsend2018-03-251-0/+2
* ima: fail signature verification based on policyMimi Zohar2018-03-231-0/+5
* ima: clear IMA_HASHMimi Zohar2018-03-231-1/+1
* IMA: Support using new creds in appraisal policyMatthew Garrett2018-03-231-8/+15
* ima/policy: fix parsing of fsuuidMike Rapoport2018-01-181-1/+1
* ima: support new "hash" and "dont_hash" policy actionsMimi Zohar2017-12-181-2/+28
* ima: Fix bool initialization/comparisonThomas Meyer2017-11-081-3/+3
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2017-07-051-60/+46
|\
| * ima: Simplify policy_func_show.Thiago Jung Bauermann2017-06-211-52/+6
| * integrity: Small code improvementsThiago Jung Bauermann2017-06-211-2/+2
| * ima: Add cgroups2 to the defaults listLaura Abbott2017-06-211-0/+3
| * ima: define a set of appraisal rules requiring file signaturesMimi Zohar2017-06-211-1/+25
| * ima: extend the "ima_policy" boot command line to support multiple policiesMimi Zohar2017-06-211-5/+10
* | fs: switch ->s_uuid to uuid_tChristoph Hellwig2017-06-051-1/+1