summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima
Commit message (Expand)AuthorAgeFilesLines
* ima: define is_ima_appraise_enabled()Mimi Zohar2017-06-211-0/+10
* ima: define Kconfig IMA_APPRAISE_BOOTPARAM optionMimi Zohar2017-06-212-0/+10
* ima: define a set of appraisal rules requiring file signaturesMimi Zohar2017-06-211-1/+25
* ima: extend the "ima_policy" boot command line to support multiple policiesMimi Zohar2017-06-211-5/+10
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris2017-04-192-34/+94
|\
| * ima: provide ">" and "<" operators for fowner/uid/euid rules.Mikhail Kurinnoi2017-03-131-28/+87
| * ima: accept previously set IMA_NEW_FILEDaniel Glöckner2017-03-071-2/+3
| * integrity: mark default IMA rules as __ro_after_initJames Morris2017-03-071-4/+4
* | KEYS: Use structure to capture key restriction function and dataMat Martineau2017-04-041-1/+10
|/
* ima: allow to check MAY_APPENDLans Zhang2017-01-272-4/+5
* ima: fix ima_d_path() possible race with renameMimi Zohar2017-01-273-6/+24
* ima: platform-independent hash valueAndreas Steffen2016-12-201-2/+4
* ima: define a canonical binary_runtime_measurements list formatMimi Zohar2016-12-205-13/+62
* ima: support restoring multiple template formatsMimi Zohar2016-12-201-3/+49
* ima: store the builtin/custom template definitions in a listMimi Zohar2016-12-203-11/+43
* ima: on soft reboot, save the measurement listMimi Zohar2016-12-203-1/+119
* ima: maintain memory size needed for serializing the measurement listMimi Zohar2016-12-203-2/+64
* ima: permit duplicate measurement list entriesMimi Zohar2016-12-201-6/+10
* ima: on soft reboot, restore the measurement listMimi Zohar2016-12-206-0/+255
* security/integrity: Harden against malformed xattrsSeth Forshee2016-11-141-1/+4
* ima: include the reason for TPM-bypass modeMimi Zohar2016-11-141-1/+2
* Revert "ima: limit file hash setting by user to fix and log modes"Mimi Zohar2016-11-141-6/+2Star
* ima: fix memory leak in ima_release_policyEric Richter2016-11-141-1/+1
* Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds2016-10-111-11/+10Star
|\
| * xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher2016-10-081-11/+10Star
* | ima: use file_dentry()Miklos Szeredi2016-09-162-3/+3
|/
* ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
* ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
* ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
* ima: change ima_measurements_show() to display the entry specific pcrEric Richter2016-06-301-5/+4Star
* ima: include pcr for each measurement log entryEric Richter2016-06-304-8/+13
* ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-305-7/+14
* ima: add policy support for extending different pcrsEric Richter2016-06-301-1/+28
* security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatAndy Shevchenko2016-05-211-12/+2Star
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-05-195-32/+61
|\
| * Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-05-063-30/+31
| |\
| | * IMA: Use the the system trusted keyrings instead of .ima_mokDavid Howells2016-04-113-27/+28
| | * KEYS: Move the point of trust determination to __key_link()David Howells2016-04-111-3/+3
| | * KEYS: Add a facility to restrict new links into a keyringDavid Howells2016-04-111-4/+4
| * | ima: add support for creating files using the mknodat syscallMimi Zohar2016-05-012-1/+29
| * | ima: fix ima_inode_post_setattrMimi Zohar2016-05-011-1/+1
| |/
* | Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2016-05-172-2/+2
|\ \
| * | constify ima_d_path()Al Viro2016-03-282-2/+2
| |/
* / ima: fix the string representation of the LSM/IMA hook enumeration orderingMimi Zohar2016-05-041-2/+2
|/
* ima: require signed IMA policyMimi Zohar2016-02-211-0/+7
* ima: measure and appraise the IMA policy itselfMimi Zohar2016-02-214-3/+24
* ima: load policy using pathDmitry Kasatkin2016-02-211-2/+43
* ima: support for kexec image and initramfsMimi Zohar2016-02-213-7/+27
* ima: remove firmware and module specific cached status infoMimi Zohar2016-02-213-25/+22Star
* module: replace copy_module_from_fd with kernel versionMimi Zohar2016-02-211-22/+13Star