 Matthew Garrett
|
5feeb61183
evm: Allow non-SHA1 digital signatures
|
%!s(int64=7) %!d(string=hai) anos |
|
Matthew Garrett
|
fa516b66a1
EVM: Allow runtime modification of the set of verified xattrs
|
%!s(int64=7) %!d(string=hai) anos |
|
Matthew Garrett
|
21af766314
EVM: turn evm_config_xattrnames into a list
|
%!s(int64=7) %!d(string=hai) anos |
 Sascha Hauer
|
70946c4ac2
evm: check for remount ro in progress before writing
|
%!s(int64=7) %!d(string=hai) anos |
 Hernán Gonzalez
|
17d7b0af06
evm: Constify *integrity_status_msg[]
|
%!s(int64=7) %!d(string=hai) anos |
|
Hernán Gonzalez
|
1a82cee3e6
evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.c
|
%!s(int64=7) %!d(string=hai) anos |
|
Matthew Garrett
|
50b977481f
EVM: Add support for portable signature format
|
%!s(int64=7) %!d(string=hai) anos |
|
Matthew Garrett
|
ae1ba1676b
EVM: Allow userland to permit modification of EVM-protected metadata
|
%!s(int64=7) %!d(string=hai) anos |
|
Matthew Garrett
|
096b854648
EVM: Include security.apparmor in EVM measurements
|
%!s(int64=7) %!d(string=hai) anos |
 Ingo Molnar
|
50d34394ce
sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sched/task_stack.h>
|
%!s(int64=8) %!d(string=hai) anos |
 Seth Forshee
|
b4bfec7f4a
security/integrity: Harden against malformed xattrs
|
%!s(int64=9) %!d(string=hai) anos |
 Andreas Gruenbacher
|
5d6c31910b
xattr: Add __vfs_{get,set,remove}xattr helpers
|
%!s(int64=8) %!d(string=hai) anos |
 Al Viro
|
ce23e64013
->getxattr(): pass dentry and inode as separate arguments
|
%!s(int64=9) %!d(string=hai) anos |
|
Al Viro
|
fc64005c93
don't bother with ->d_inode->i_sb - it's always equal to ->d_sb
|
%!s(int64=9) %!d(string=hai) anos |
 Ryan Ware
|
613317bd21
EVM: Use crypto_memneq() for digest comparisons
|
%!s(int64=9) %!d(string=hai) anos |
 Dmitry Kasatkin
|
523b74b16b
evm: reset EVM status when file attributes change
|
%!s(int64=9) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
26ddabfe96
evm: enable EVM when X509 certificate is loaded
|
%!s(int64=9) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
2ce523eb89
evm: load an x509 certificate from the kernel
|
%!s(int64=9) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
f4dc37785e
integrity: define '.evm' as a builtin 'trusted' keyring
|
%!s(int64=9) %!d(string=hai) anos |
 Dmitry Kasatkin
|
7c51bb00c4
evm: fix potential race when removing xattrs
|
%!s(int64=10) %!d(string=hai) anos |
 Mimi Zohar
|
5101a1850b
evm: labeling pseudo filesystems exception
|
%!s(int64=10) %!d(string=hai) anos |
 David Howells
|
c6f493d631
VFS: security/: d_backing_inode() annotations
|
%!s(int64=10) %!d(string=hai) anos |
 Linus Torvalds
|
67e2c38838
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
%!s(int64=10) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3b1deef6b1
evm: check xattr value length and type in evm_inode_setxattr()
|
%!s(int64=10) %!d(string=hai) anos |
 Dmitry Kasatkin
|
c2baec7ffa
evm: skip replacing EVM signature with HMAC on read-only filesystem
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3dcbad52cf
evm: properly handle INTEGRITY_NOXATTRS EVM status
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
1f1009791b
evm: prevent passing integrity check if xattr read fails
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
e7d021e283
evm: fix checkpatch warnings
|
%!s(int64=11) %!d(string=hai) anos |
|
Mimi Zohar
|
2fb1c9a4f2
evm: prohibit userspace writing 'security.evm' HMAC value
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3e38df56e6
evm: provide option to protect additional SMACK xattrs
|
%!s(int64=11) %!d(string=hai) anos |
