summaryrefslogtreecommitdiff
path: root/security/integrity/ima
AgeCommit message (Expand)Author
2023-11-02Merge tag 'integrity-v6.7' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2023-10-31ima: detect changes to the backing overlay fileMimi Zohar
2023-10-30Merge tag 'hardening-v6.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2023-10-20ima: Add __counted_by for struct modsig and use struct_size()Gustavo A. R. Silva
2023-09-27ima: rework CONFIG_IMA dependency blockArnd Bergmann
2023-09-26ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko
2023-08-30Merge tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2023-08-29Merge tag 'tpmdd-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkk...Linus Torvalds
2023-08-18integrity: Annotate struct ima_rule_opt_list with __counted_byKees Cook
2023-08-17integrity: Enforce digitalSignature usage in the ima and evm keyringsEric Snowberg
2023-08-07kexec_lock: Replace kexec_mutex() by kexec_lock() in two commentsWenyu Liu
2023-08-01ima: require signed IMA policy when UEFI secure boot is enabledCoiby Xu
2023-08-01integrity: Always reference the blacklist keyring with appraisalEric Snowberg
2023-08-01ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain
2023-06-27Merge tag 'integrity-v6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2023-06-14fsverity: rework fsverity_get_digest() againEric Biggers
2023-06-06ima: Fix build warningsRoberto Sassu
2023-05-23IMA: use vfs_getattr_nosec to get the i_versionJeff Layton
2023-04-29Merge tag 'integrity-v6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2023-04-05mm, treewide: redefine MAX_ORDER sanelyKirill A. Shutemov
2023-03-15IMA: allow/fix UML buildsRandy Dunlap
2023-02-22Merge tag 'integrity-v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2023-01-31ima: Introduce MMAP_CHECK_REQPROT hookRoberto Sassu
2023-01-31ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu
2023-01-19fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner
2023-01-19fs: port acl to mnt_idmapChristian Brauner
2023-01-19fs: port xattr to mnt_idmapChristian Brauner
2023-01-19fs: port ->permission() to pass mnt_idmapChristian Brauner
2023-01-18ima: fix ima_delete_rules() kernel-doc warningRandy Dunlap
2023-01-18ima: return IMA digest value only when IMA_COLLECTED flag is setMatt Bobrowski
2023-01-18ima: fix error handling logic when file measurement failedMatt Bobrowski
2022-12-21Merge tag 'fs.vfsuid.ima.v6.2-rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2022-12-13Merge tag 'integrity-v6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2022-12-13Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2022-12-13mnt_idmapping: move ima-only helpers to imaChristian Brauner
2022-12-12Merge tag 'fs.vfsuid.conversion.v6.2' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds
2022-11-28ima: Fix hash dependency to correct algorithmTianjia Zhang
2022-11-18lsm,fs: fix vfs_getxattr_alloc() return type and caller error pathsPaul Moore
2022-11-16ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng
2022-11-03ima: Fix memory leak in __ima_inode_hash()Roberto Sassu
2022-11-02ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua
2022-11-02ima: Simplify ima_lsm_copy_ruleGUO Zihua
2022-11-02ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu
2022-10-26ima: use type safe idmapping helpersChristian Brauner
2022-10-20integrity: implement get and set acl hookChristian Brauner
2022-08-23ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar
2022-08-01Merge tag 'x86_kdump_for_v6.0_rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2022-07-20lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg
2022-07-13ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie
2022-07-13ima: force signature verification when CONFIG_KEXEC_SIG is configuredCoiby Xu