 Mimi Zohar
|
5a9196d715
ima: add support for measuring and appraising firmware
|
11 years ago |
|
Mimi Zohar
|
7d2ce2320e
ima: define '.ima' as a builtin 'trusted' keyring
|
12 years ago |
 Dmitry Kasatkin
|
209b43ca64
ima: delay template descriptor lookup until use
|
11 years ago |
|
Dmitry Kasatkin
|
2c50b96482
ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()
|
11 years ago |
|
Dmitry Kasatkin
|
14503eb994
ima: check inode integrity cache in violation check
|
11 years ago |
|
Dmitry Kasatkin
|
b882fae2d3
ima: prevent unnecessary policy checking
|
11 years ago |
|
Mimi Zohar
|
f9b2a735bd
ima: audit log files opened with O_DIRECT flag
|
11 years ago |
|
Dmitry Kasatkin
|
61997c4383
ima: return d_name.name if d_path fails
|
12 years ago |
|
Dmitry Kasatkin
|
2bb930abcf
integrity: fix checkpatch errors
|
11 years ago |
|
Mimi Zohar
|
bcbc9b0cf6
ima: extend the measurement list to include the file signature
|
12 years ago |
|
Mimi Zohar
|
e7a2ad7eb6
ima: enable support for larger default filedata hash algorithms
|
12 years ago |
 Roberto Sassu
|
add1c05dce
ima: defer determining the appraisal hash algorithm for 'ima' template
|
12 years ago |
|
Roberto Sassu
|
7d802a227b
ima: pass the file descriptor to ima_add_violation()
|
12 years ago |
|
Dmitry Kasatkin
|
d3634d0f42
ima: read and use signature hash algorithm
|
12 years ago |
|
Dmitry Kasatkin
|
c7c8bb237f
ima: provide support for arbitrary hash algorithms
|
12 years ago |
|
Dmitry Kasatkin
|
089bc8e95a
ima: fix script messages
|
12 years ago |
 David Howells
|
c77cecee52
Replace a bunch of file->dentry->d_inode refs with file_inode()
|
12 years ago |
|
Mimi Zohar
|
df2c2afba4
ima: eliminate passing d_name.name to process_measurement()
|
12 years ago |
 Linus Torvalds
|
d895cb1af1
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
12 years ago |
|
Mimi Zohar
|
a2c2c3a71c
ima: "remove enforce checking duplication" merge fix
|
12 years ago |
 Al Viro
|
496ad9aa8e
new helper: file_inode(file)
|
12 years ago |
|
Linus Torvalds
|
33673dcb37
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
12 years ago |
|
Mimi Zohar
|
5a73fcfa88
ima: differentiate appraise status only for hook specific rules
|
12 years ago |
|
Mimi Zohar
|
d79d72e024
ima: per hook cache integrity appraisal status
|
12 years ago |
 Dmitry Kasatkin
|
0e5a247cb3
ima: added policy support for 'security.ima' type
|
13 years ago |
|
Dmitry Kasatkin
|
a175b8bb29
ima: forbid write access to files with digital signatures
|
13 years ago |
|
Dmitry Kasatkin
|
ea1046d4c5
ima: move full pathname resolution to separate function
|
13 years ago |
|
Mimi Zohar
|
16cac49f72
ima: rename FILE_MMAP to MMAP_CHECK
|
12 years ago |
|
Dmitry Kasatkin
|
750943a307
ima: remove enforce checking duplication
|
13 years ago |
|
Mimi Zohar
|
a7f2a366f6
ima: fallback to MODULE_SIG_ENFORCE for existing kernel module syscall
|
12 years ago |
