 Eric Biggers
|
b2724d5802
security/integrity: constify some read-only data
|
7 years ago |
 Linus Torvalds
|
c715ebeb03
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
7 years ago |
|
Linus Torvalds
|
92d4a03674
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
7 years ago |
 Stefan Berger
|
ec403d8ed0
ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL instead
|
7 years ago |
|
Stefan Berger
|
5c2a640aff
ima: Use tpm_default_chip() and call TPM functions with a tpm_chip
|
7 years ago |
 Mimi Zohar
|
16c267aac8
ima: based on policy require signed kexec kernel images
|
7 years ago |
 Al Viro
|
6035a27b25
IMA: don't propagate opened through the entire thing
|
7 years ago |
 Petr Vorel
|
4ecd9934ba
ima: Remove unused variable ima_initialized
|
7 years ago |
 Matthew Garrett
|
d906c10d8a
IMA: Support using new creds in appraisal policy
|
7 years ago |
 Thiago Jung Bauermann
|
2663218ba6
ima: Simplify policy_func_show.
|
8 years ago |
|
Thiago Jung Bauermann
|
bb543e3959
integrity: Small code improvements
|
8 years ago |
 Tycho Andersen
|
5d659f286d
ima: fix up #endif comments
|
8 years ago |
|
Mimi Zohar
|
bc15ed663e
ima: fix ima_d_path() possible race with rename
|
8 years ago |
|
Mimi Zohar
|
d68a6fe9fc
ima: define a canonical binary_runtime_measurements list format
|
8 years ago |
|
Mimi Zohar
|
3f23d624de
ima: store the builtin/custom template definitions in a list
|
8 years ago |
|
Mimi Zohar
|
7b8589cc29
ima: on soft reboot, save the measurement list
|
8 years ago |
|
Mimi Zohar
|
d158847ae8
ima: maintain memory size needed for serializing the measurement list
|
8 years ago |
|
Mimi Zohar
|
94c3aac567
ima: on soft reboot, restore the measurement list
|
8 years ago |
 Eric Richter
|
14b1da85bb
ima: include pcr for each measurement log entry
|
9 years ago |
|
Eric Richter
|
725de7fabb
ima: extend ima_get_action() to return the policy pcr
|
9 years ago |
|
Al Viro
|
81cd8896a6
constify ima_d_path()
|
9 years ago |
|
Mimi Zohar
|
19f8a84713
ima: measure and appraise the IMA policy itself
|
9 years ago |
|
Mimi Zohar
|
d9ddf077bb
ima: support for kexec image and initramfs
|
9 years ago |
|
Mimi Zohar
|
c6af8efe97
ima: remove firmware and module specific cached status info
|
9 years ago |
|
Mimi Zohar
|
cf22221786
ima: define a new hook to measure and appraise a file already in memory
|
9 years ago |
 Dmitry Kasatkin
|
11d7646df8
ima: provide buffer hash calculation function
|
11 years ago |
|
Mimi Zohar
|
4ad87a3d74
ima: use "ima_hooks" enum as function argument
|
9 years ago |
|
Dmitry Kasatkin
|
1525b06d99
ima: separate 'security.ima' reading functionality from collect
|
11 years ago |
 Sasha Levin
|
0112721df4
IMA: policy can be updated zero times
|
9 years ago |
 Petko Manolov
|
80eae209d6
IMA: allow reading back the current IMA policy
|
9 years ago |
