Dmitry Kasatkin
|
7c51bb00c4
evm: fix potential race when removing xattrs
|
10 years ago |
Mimi Zohar
|
5101a1850b
evm: labeling pseudo filesystems exception
|
10 years ago |
David Howells
|
c6f493d631
VFS: security/: d_backing_inode() annotations
|
10 years ago |
Linus Torvalds
|
67e2c38838
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
10 years ago |
Dmitry Kasatkin
|
3b1deef6b1
evm: check xattr value length and type in evm_inode_setxattr()
|
10 years ago |
Dmitry Kasatkin
|
c2baec7ffa
evm: skip replacing EVM signature with HMAC on read-only filesystem
|
11 years ago |
Dmitry Kasatkin
|
3dcbad52cf
evm: properly handle INTEGRITY_NOXATTRS EVM status
|
11 years ago |
Dmitry Kasatkin
|
1f1009791b
evm: prevent passing integrity check if xattr read fails
|
11 years ago |
Dmitry Kasatkin
|
e7d021e283
evm: fix checkpatch warnings
|
11 years ago |
Mimi Zohar
|
2fb1c9a4f2
evm: prohibit userspace writing 'security.evm' HMAC value
|
11 years ago |
Dmitry Kasatkin
|
3e38df56e6
evm: provide option to protect additional SMACK xattrs
|
11 years ago |
Dmitry Kasatkin
|
d3b3367948
evm: replace HMAC version with attribute mask
|
11 years ago |
Linus Torvalds
|
5166701b36
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
11 years ago |
Al Viro
|
627bf81ac6
get rid of pointless checks for NULL ->i_op
|
11 years ago |
Joe Perches
|
20ee451f5a
security: integrity: Use a more current logging style
|
11 years ago |
Dmitry Kasatkin
|
b1aaab22e2
ima: pass full xattr with the signature
|
11 years ago |
Tetsuo Handa
|
9548906b2b
xattr: Constify ->name member of "struct xattr".
|
12 years ago |
Mimi Zohar
|
9b97b6cdd4
evm: audit integrity metadata failures
|
12 years ago |
Dmitry Kasatkin
|
74de668424
evm: add file system uuid to EVM hmac
|
13 years ago |
Dmitry Kasatkin
|
e90805656d
evm: remove unused cleanup functions
|
13 years ago |
Mimi Zohar
|
2fe5d6def1
ima: integrity appraisal extension
|
13 years ago |
Dmitry Kasatkin
|
15647eb398
evm: digital signature verification support
|
14 years ago |
Mimi Zohar
|
566be59ab8
evm: permit mode bits to be updated
|
14 years ago |
Mimi Zohar
|
bf6d0f5dcd
evm: posix acls modify i_mode
|
14 years ago |
Mimi Zohar
|
a924ce0b35
evm: limit verifying current security.evm integrity
|
14 years ago |
Mimi Zohar
|
5a4730ba95
evm: fix evm_inode_init_security return code
|
14 years ago |
Mimi Zohar
|
817b54aa45
evm: add evm_inode_setattr to prevent updating an invalid security.evm
|
14 years ago |
Mimi Zohar
|
7102ebcd65
evm: permit only valid security.evm xattrs to be updated
|
14 years ago |
Dmitry Kasatkin
|
24e0198efe
evm: replace hmac_status with evm_status
|
14 years ago |
Dmitry Kasatkin
|
6d38ca01c0
evm: evm_verify_hmac must not return INTEGRITY_UNKNOWN
|
14 years ago |