summaryrefslogtreecommitdiffstats
path: root/security/loadpin
Commit message (Expand)AuthorAgeFilesLines
* introduce fd_file(), convert all accessors to it.Al Viro2024-08-121-2/+2
* Merge tag 'hardening-v6.10-rc1-fixes' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2024-05-241-0/+3
|\
| * loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompressionStephen Boyd2024-05-181-0/+3
* | lsm: remove the now superfluous sentinel element from ctl_table arrayJoel Granados2024-04-151-1/+0
|/
* lsm: mark the lsm_id variables are marked as staticPaul Moore2023-11-121-1/+1
* LSM: Identify modules by more than nameCasey Schaufler2023-11-121-1/+8
* LoadPin: Annotate struct dm_verity_loadpin_trusted_root_digest with __counted_byKees Cook2023-08-251-2/+1
* Merge tag 'sysctl-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m...Linus Torvalds2023-04-271-7/+1
|\
| * loadpin: simplify sysctls use with register_sysctl()Luis Chamberlain2023-04-131-7/+1
* | selinux: remove the runtime disable functionalityPaul Moore2023-03-201-1/+1
|/
* LoadPin: Allow filesystem switch when not enforcingKees Cook2023-01-191-5/+11
* LoadPin: Move pin reporting cleanly out of lockingKees Cook2023-01-191-9/+6
* LoadPin: Refactor sysctl initializationKees Cook2023-01-191-16/+19
* LoadPin: Refactor read-only check into a helperKees Cook2023-01-191-12/+21
* LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook2022-12-141-12/+18
* LoadPin: Require file with verity root digests to have a headerMatthias Kaehlcke2022-09-072-2/+21
* LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke2022-09-071-1/+1
* LoadPin: Return EFAULT on copy_from_user() failuresKees Cook2022-08-161-4/+2
* LoadPin: Enable loading from trusted dm-verity devicesMatthias Kaehlcke2022-07-082-1/+182
* loadpin: stop using bdevnameChristoph Hellwig2022-05-161-4/+1
* LSM: Add "contents" flag to kernel_read_file hookKees Cook2020-10-051-2/+12
* LSM: Introduce kernel_post_load_data() hookKees Cook2020-10-051-1/+1
* fs/kernel_read_file: Split into separate include fileScott Branden2020-10-051-0/+1
* block: move block-related definitions out of fs.hChristoph Hellwig2020-06-241-0/+1
* proc/sysctl: add shared variables for range checkMatteo Croce2019-07-181-4/+2
* Merge tag 'loadpin-v5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2019-07-111-0/+48
|\
| * security/loadpin: Allow to exclude specific file typesKe Wu2019-05-311-0/+48
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Thomas Gleixner2019-06-051-9/+1
|/
* treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner2019-05-212-0/+2
* LoadPin: Initialize as ordered LSMKees Cook2019-01-081-1/+7
* LoadPin: Rename boot param "enabled" to "enforce"Kees Cook2018-10-182-12/+13
* LoadPin: Report friendly block device nameKees Cook2018-10-181-1/+4
* module: replace the existing LSM hook in init_moduleMimi Zohar2018-07-161-0/+6
* get rid of pointless includes of fs_struct.hAl Viro2018-02-221-1/+0
* security: mark LSM hooks as __ro_after_initJames Morris2017-03-061-1/+1
* LSM: Add /sys/kernel/security/lsmCasey Schaufler2017-01-191-1/+1
* LSM: LoadPin: provide enablement CONFIGKees Cook2016-05-172-6/+15
* LSM: LoadPin for kernel file loading restrictionsKees Cook2016-04-213-0/+201