 Seth Forshee
|
b4bfec7f4a
security/integrity: Harden against malformed xattrs
|
%!s(int64=9) %!d(string=hai) anos |
 Andreas Gruenbacher
|
5d6c31910b
xattr: Add __vfs_{get,set,remove}xattr helpers
|
%!s(int64=8) %!d(string=hai) anos |
 Al Viro
|
ce23e64013
->getxattr(): pass dentry and inode as separate arguments
|
%!s(int64=9) %!d(string=hai) anos |
|
Al Viro
|
fc64005c93
don't bother with ->d_inode->i_sb - it's always equal to ->d_sb
|
%!s(int64=9) %!d(string=hai) anos |
 Ryan Ware
|
613317bd21
EVM: Use crypto_memneq() for digest comparisons
|
%!s(int64=9) %!d(string=hai) anos |
 Dmitry Kasatkin
|
523b74b16b
evm: reset EVM status when file attributes change
|
%!s(int64=9) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
26ddabfe96
evm: enable EVM when X509 certificate is loaded
|
%!s(int64=9) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
2ce523eb89
evm: load an x509 certificate from the kernel
|
%!s(int64=9) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
f4dc37785e
integrity: define '.evm' as a builtin 'trusted' keyring
|
%!s(int64=9) %!d(string=hai) anos |
 Dmitry Kasatkin
|
7c51bb00c4
evm: fix potential race when removing xattrs
|
%!s(int64=10) %!d(string=hai) anos |
 Mimi Zohar
|
5101a1850b
evm: labeling pseudo filesystems exception
|
%!s(int64=10) %!d(string=hai) anos |
 David Howells
|
c6f493d631
VFS: security/: d_backing_inode() annotations
|
%!s(int64=10) %!d(string=hai) anos |
 Linus Torvalds
|
67e2c38838
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
%!s(int64=10) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3b1deef6b1
evm: check xattr value length and type in evm_inode_setxattr()
|
%!s(int64=10) %!d(string=hai) anos |
 Dmitry Kasatkin
|
c2baec7ffa
evm: skip replacing EVM signature with HMAC on read-only filesystem
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3dcbad52cf
evm: properly handle INTEGRITY_NOXATTRS EVM status
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
1f1009791b
evm: prevent passing integrity check if xattr read fails
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
e7d021e283
evm: fix checkpatch warnings
|
%!s(int64=11) %!d(string=hai) anos |
|
Mimi Zohar
|
2fb1c9a4f2
evm: prohibit userspace writing 'security.evm' HMAC value
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3e38df56e6
evm: provide option to protect additional SMACK xattrs
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
d3b3367948
evm: replace HMAC version with attribute mask
|
%!s(int64=11) %!d(string=hai) anos |
|
Linus Torvalds
|
5166701b36
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
%!s(int64=11) %!d(string=hai) anos |
|
Al Viro
|
627bf81ac6
get rid of pointless checks for NULL ->i_op
|
%!s(int64=11) %!d(string=hai) anos |
 Joe Perches
|
20ee451f5a
security: integrity: Use a more current logging style
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
b1aaab22e2
ima: pass full xattr with the signature
|
%!s(int64=12) %!d(string=hai) anos |
 Tetsuo Handa
|
9548906b2b
xattr: Constify ->name member of "struct xattr".
|
%!s(int64=12) %!d(string=hai) anos |
|
Mimi Zohar
|
9b97b6cdd4
evm: audit integrity metadata failures
|
%!s(int64=12) %!d(string=hai) anos |
 Dmitry Kasatkin
|
74de668424
evm: add file system uuid to EVM hmac
|
%!s(int64=13) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
e90805656d
evm: remove unused cleanup functions
|
%!s(int64=13) %!d(string=hai) anos |
|
Mimi Zohar
|
2fe5d6def1
ima: integrity appraisal extension
|
%!s(int64=13) %!d(string=hai) anos |
