asedeno.scripts.mit.edu Git - linux.git/search

]> asedeno.scripts.mit.edu Git - linux.git/search

2018-05-31	Colin Ian King	EVM: Fix null dereference on xattr when xattr fails to allocate Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-31	Colin Ian King	EVM: fix memory leak of temporary buffer 'temp' Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-31	Petko Manolov	IMA: use list_splice_tail_init_rcu() instead of its... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-31	Yisheng Xie	ima: use match_string() helper Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-22	Mimi Zohar	ima: fix updating the ima_appraise flag Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-22	Mimi Zohar	ima: based on policy verify firmware signatures (pre... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-22	Mimi Zohar	ima: define a new policy condition based on the filesystem name Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-18	Matthew Garrett	EVM: Allow runtime modification of the set of verified xattrs Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-18	Matthew Garrett	EVM: turn evm_config_xattrnames into a list Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-17	Matthew Garrett	integrity: Add an integrity directory in securityfs Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-17	Petr Vorel	ima: Remove unused variable ima_initialized Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-17	Petr Vorel	ima: Unify logging Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-05-17	Petr Vorel	ima: Reflect correct permissions for policy Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Petr Vorel	ima: Fallback to the builtin hash algorithm Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Martin Townsend	ima: Add smackfs to the default appraise/measure list Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Sascha Hauer	evm: check for remount ro in progress before writing Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Thiago Jung Bauermann	ima: Improvements in ima_appraise_measurement() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Thiago Jung Bauermann	ima: Simplify ima_eventsig_init() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Thiago Jung Bauermann	integrity: Remove unused macro IMA_ACTION_RULE_FLAGS Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Tycho Andersen	ima: drop vla in ima_audit_measurement() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-25	Jiandi An	ima: Fix Kconfig to select TPM 2.0 CRB interface Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Hernán Gonzalez	evm: Constify *integrity_status_msg[] Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Hernán Gonzalez	evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.c Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Mimi Zohar	fuse: define the filesystem as untrusted Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Mimi Zohar	ima: fail signature verification based on policy Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Mimi Zohar	ima: clear IMA_HASH Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Mimi Zohar	ima: re-evaluate files on privileged mounted filesystems Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Mimi Zohar	ima: fail file signature verification on non-init mounted... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Matthew Garrett	IMA: Support using new creds in appraisal policy Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-03-23	Matthew Garrett	security: Add a cred_getsecid hook Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2018-01-18	Mike Rapoport	ima/policy: fix parsing of fsuuid Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-18	Sascha Hauer	ima: Use i_version only when filesystem supports it Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-18	Jeff Layton	integrity: remove unneeded initializations in integrity_iint... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-18	Bruno E. O. Meneguele	ima: log message to module appraisal error Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-18	Roberto Sassu	ima: pass filename to ima_rdwr_violation_check() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-18	Joe Perches	ima: Fix line continuation format Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-18	Mimi Zohar	ima: support new "hash" and "dont_hash" policy actions Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-11	Dmitry Kasatkin	ima: re-introduce own integrity cache lock Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-11	Matthew Garrett	EVM: Add support for portable signature format Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-11	Matthew Garrett	EVM: Allow userland to permit modification of EVM-protected... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-12-11	Mimi Zohar	ima: relax requiring a file signature for new files... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Thiago Jung Bauermann	ima: Remove redundant conditional operator Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Thomas Meyer	ima: Fix bool initialization/comparison Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Bruno E. O. Meneguele	ima: check signature enforcement against cmdline param... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Bruno E. O. Meneguele	module: export module signature enforcement status Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Boshi Wang	ima: fix hash algorithm initialization Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Matthew Garrett	EVM: Only complain about a missing HMAC key once Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Matthew Garrett	EVM: Allow userspace to signal an RSA key has been loaded Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Matthew Garrett	EVM: Include security.apparmor in EVM measurements Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Mimi Zohar	ima: call ima_file_free() prior to calling fasync Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Christoph Hellwig	integrity: use kernel_read_file_from_path() to read x509 certs Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Mimi Zohar	ima: always measure and audit files in policy Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Mimi Zohar	ima: don't remove the securityfs policy file Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-11-08	Mimi Zohar	vfs: fix mounting a filesystem with i_version Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Eric Richter	IMA: update IMA policy documentation to include pcr= option Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Thiago Jung Bauermann	ima: Log the same audit cause whenever a file has no signature Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Thiago Jung Bauermann	ima: Simplify policy_func_show. are always in sync (suggested by Mimi Zohar). Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Thiago Jung Bauermann	integrity: Small code improvements Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Roberto Sassu	ima: fix get_binary_runtime_size() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Roberto Sassu	ima: use ima_parse_buf() to parse template data Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Roberto Sassu	ima: use ima_parse_buf() to parse measurements headers Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Roberto Sassu	ima: introduce ima_parse_buf() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Laura Abbott	ima: Add cgroups2 to the defaults list Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Geliang Tang	ima: use memdup_user_nul Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Tycho Andersen	ima: fix up #endif comments Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Ben Hutchings	IMA: Correct Kconfig dependencies for hash selection Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Mimi Zohar	ima: define is_ima_appraise_enabled() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Mimi Zohar	ima: define Kconfig IMA_APPRAISE_BOOTPARAM option Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Mimi Zohar	ima: define a set of appraisal rules requiring file signatures Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-06-21	Mimi Zohar	ima: extend the "ima_policy" boot command line to support... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-03-13	Mikhail Kurinnoi	ima: provide ">" and "<" operators for fowner/uid/euid rules. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-03-07	Daniel Glöckner	ima: accept previously set IMA_NEW_FILE Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-03-07	James Morris	integrity: mark default IMA rules as __ro_after_init Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-01-27	Lans Zhang	ima: allow to check MAY_APPEND Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2017-01-27	Mimi Zohar	ima: fix ima_d_path() possible race with rename Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-11-14	Seth Forshee	security/integrity: Harden against malformed xattrs Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-11-14	Baruch Siach	Doc: security: keys-trusted: drop duplicate blobauth entry Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-11-14	Mimi Zohar	ima: include the reason for TPM-bypass mode Signed-off-by: Mimi Zohar (zohar@linux.vnet.ibm>	commit \| commitdiff \| tree
2016-11-14	Mimi Zohar	Revert "ima: limit file hash setting by user to fix... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-11-14	Eric Richter	ima: fix memory leak in ima_release_policy Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: extend the measurement entry specific pcr Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: change integrity cache to store measured pcr Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: redefine duplicate template entries Reported-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: change ima_measurements_show() to display the... Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: include pcr for each measurement log entry Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: extend ima_get_action() to return the policy pcr Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	ima: add policy support for extending different pcrs Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-06-30	Eric Richter	integrity: add measured_pcrs field to integrity cache Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-05-01	Mimi Zohar	ima: add support for creating files using the mknodat syscall Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-05-01	Mimi Zohar	ima: fix ima_inode_post_setattr Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-05-01	Dmitry Kasatkin	vfs: forbid write access when reading a file into memory Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	ima: require signed IMA policy Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	ima: measure and appraise the IMA policy itself Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Dmitry Kasatkin	ima: load policy using path Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	ima: support for kexec image and initramfs Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	kexec: replace call to copy_file_from_fd() with kernel version Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	ima: remove firmware and module specific cached status info Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	module: replace copy_module_from_fd with kernel version Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	vfs: define kernel_copy_file_from_fd() Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
2016-02-21	Mimi Zohar	security: define kernel_read_file hook Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>	commit \| commitdiff \| tree
next

local clone of linux.git

RSS Atom