Eric Biggers
|
2ab5daf867
security/integrity: remove unnecessary 'init_keyring' variable
|
6 years ago |
Eric Biggers
|
b2724d5802
security/integrity: constify some read-only data
|
7 years ago |
Randy Dunlap
|
120f3b11ef
integrity/security: fix digsig.c build error with header file
|
7 years ago |
Christoph Hellwig
|
a7d3d0392a
integrity: use kernel_read_file_from_path() to read x509 certs
|
8 years ago |
Mat Martineau
|
2b6aa412ff
KEYS: Use structure to capture key restriction function and data
|
9 years ago |
Seth Forshee
|
b4bfec7f4a
security/integrity: Harden against malformed xattrs
|
9 years ago |
David Howells
|
56104cf2b8
IMA: Use the the system trusted keyrings instead of .ima_mok
|
9 years ago |
David Howells
|
77f68bac94
KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTED
|
9 years ago |
David Howells
|
a511e1af8b
KEYS: Move the point of trust determination to __key_link()
|
9 years ago |
David Howells
|
5ac7eace2d
KEYS: Add a facility to restrict new links into a keyring
|
9 years ago |
Dmitry Kasatkin
|
f4dc37785e
integrity: define '.evm' as a builtin 'trusted' keyring
|
9 years ago |
Dmitry Kasatkin
|
72e1eed8ab
integrity: prevent loading untrusted certificates on the IMA trusted keyring
|
10 years ago |
Dmitry Kasatkin
|
9d03a721a3
integrity: add validity checks for 'path' parameter
|
10 years ago |
Dmitry Kasatkin
|
65d543b233
integrity: provide a function to load x509 certificate from the kernel
|
10 years ago |
Dmitry Kasatkin
|
d16a8585d3
integrity: add missing '__init' keyword for integrity_init_keyring()
|
11 years ago |
Mimi Zohar
|
7d2ce2320e
ima: define '.ima' as a builtin 'trusted' keyring
|
12 years ago |
Linus Torvalds
|
34ef7bd382
Revert "ima: define '_ima' as a builtin 'trusted' keyring"
|
11 years ago |
Mimi Zohar
|
217091dd7a
ima: define '_ima' as a builtin 'trusted' keyring
|
12 years ago |
Dmitry Kasatkin
|
b1aaab22e2
ima: pass full xattr with the signature
|
11 years ago |
Dmitry Kasatkin
|
089bc8e95a
ima: fix script messages
|
11 years ago |
Dmitry Kasatkin
|
e0751257a6
ima: digital signature verification using asymmetric keys
|
12 years ago |
Dmitry Kasatkin
|
8607c50147
integrity: digital signature verification using multiple keyrings
|
14 years ago |