aboutsummaryrefslogtreecommitdiffstats
path: root/security/integrity
AgeCommit message (Expand)AuthorFilesLines
2013-02-27hlist: drop the node parameter from iteratorsSasha Levin1-2/+1
2013-02-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds3-6/+6
2013-02-26block: fix part_pack_uuid() build errorMimi Zohar1-5/+6
2013-02-26ima: "remove enforce checking duplication" merge fixMimi Zohar1-1/+2
2013-02-22new helper: file_inode(file)Al Viro3-6/+6
2013-02-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds18-193/+552
2013-02-06ima: digital signature verification using asymmetric keysDmitry Kasatkin5-1/+150
2013-02-06ima: rename hash calculation functionsDmitry Kasatkin3-9/+9
2013-02-06ima: use new crypto_shash API instead of old crypto_hashDmitry Kasatkin3-38/+41
2013-02-06ima: add policy support for file system uuidDmitry Kasatkin1-1/+21
2013-02-06evm: add file system uuid to EVM hmacDmitry Kasatkin4-0/+18
2013-01-22ima: differentiate appraise status only for hook specific rulesMimi Zohar2-6/+12
2013-01-22ima: per hook cache integrity appraisal statusMimi Zohar6-25/+136
2013-01-22ima: increase iint flag sizeMimi Zohar1-12/+12
2013-01-22ima: added policy support for 'security.ima' typeDmitry Kasatkin4-1/+25
2013-01-22evm: checking if removexattr is not a NULLDmitry Kasatkin1-2/+2
2013-01-16ima: forbid write access to files with digital signaturesDmitry Kasatkin1-2/+5
2013-01-16ima: move full pathname resolution to separate functionDmitry Kasatkin3-31/+38
2013-01-16integrity: reduce storage size for ima_status and evm_statusDmitry Kasatkin1-2/+2
2013-01-16ima: rename FILE_MMAP to MMAP_CHECKMimi Zohar4-7/+8
2013-01-16ima: remove security.ima hexdumpDmitry Kasatkin1-5/+0
2013-01-16ima: remove enforce checking duplicationDmitry Kasatkin1-32/+20
2013-01-16ima: set appraise status in fix mode only when xattr is fixedDmitry Kasatkin1-5/+6
2013-01-16evm: remove unused cleanup functionsDmitry Kasatkin3-16/+0
2013-01-16ima: re-initialize IMA policy LSM infoMimi Zohar1-10/+58
2012-12-24ima: fallback to MODULE_SIG_ENFORCE for existing kernel module syscallMimi Zohar3-5/+11
2012-12-14ima: support new kernel module syscallMimi Zohar4-3/+27
2012-10-05ima: fix bug in argument orderDmitry Kasatkin2-4/+4
2012-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds11-140/+650
2012-09-21userns: Add user namespace support to IMAEric W. Biederman2-9/+10
2012-09-21userns: Convert EVM to deal with kuids and kgids in it's hmac computationEric W. Biederman1-2/+2
2012-09-19ima: change flags container data typeDmitry Kasatkin1-1/+1
2012-09-13ima: audit log hashesPeter Moody5-6/+55
2012-09-13ima: generic IMA action flag handlingDmitry Kasatkin4-19/+26
2012-09-12ima: rename ima_must_appraise_or_measureDmitry Kasatkin3-4/+4
2012-09-07ima: digital signature verification supportDmitry Kasatkin2-19/+52
2012-09-07ima: add support for different security.ima data typesMimi Zohar3-14/+17
2012-09-07ima: add ima_inode_setxattr/removexattr function and callsMimi Zohar1-0/+57
2012-09-07ima: replace iint spinblock with rwlock/read_lockDmitry Kasatkin1-9/+7
2012-09-07ima: allocating iint improvementsDmitry Kasatkin2-35/+23
2012-09-07ima: add appraise action keywords and default rulesMimi Zohar2-40/+116
2012-09-07ima: integrity appraisal extensionMimi Zohar11-53/+351
2012-08-22ima: enable the IBM vTPM as the default TPM in the PPC64 caseKent Yoder1-0/+1
2012-07-05ima: audit is compiled only when enabledDmitry Kasatkin4-5/+13
2012-07-05ima: ima_initialized is set only if successfulDmitry Kasatkin1-1/+2
2012-07-05ima: add policy for pseudo fsDmitry Kasatkin1-0/+2
2012-07-02ima: remove unused cleanup functionsDmitry Kasatkin3-20/+0
2012-07-02ima: free securityfs violations fileDmitry Kasatkin1-0/+1
2012-07-02ima: use full pathnames in measurement listMimi Zohar2-7/+39
2012-05-16ima: fix filename hint to reflect script interpreter nameMimi Zohar1-1/+3
2012-02-28security: fix ima kconfig warningRandy Dunlap1-1/+1
2012-02-16IMA: fix audit res field to indicate 1 for success and 0 for failureEric Paris2-2/+2
2012-02-09Merge branch 'next-queue' into nextJames Morris2-1/+2
2012-01-19ima: policy for RAMFSDmitry Kasatkin1-0/+1
2012-01-19ima: fix Kconfig dependenciesFabio Estevam1-1/+1
2012-01-19ima: fix cred sparse warningMimi Zohar1-1/+2
2012-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds3-5/+5
2012-01-18integrity: digital signature config option name changeDmitry Kasatkin3-4/+4
2012-01-18lib: digital signature config option name changeDmitry Kasatkin1-1/+1
2012-01-17audit: treat s_id as an untrusted stringKees Cook1-3/+5
2012-01-09Merge branch 'next' into for-linusJames Morris9-43/+244
2011-12-20evm: prevent racing during tfm allocationDmitry Kasatkin1-0/+9
2011-12-20evm: key must be set once during initializationDmitry Kasatkin1-4/+6
2011-12-19ima: fix invalid memory referenceRoberto Sassu1-5/+11
2011-12-19ima: free duplicate measurement memoryRoberto Sassu2-2/+3
2011-12-08evm: prevent racing during tfm allocationDmitry Kasatkin1-3/+11
2011-12-08evm: key must be set once during initializationDmitry Kasatkin1-7/+8
2011-11-22digsig: build dependency fixDmitry Kasatkin1-1/+1
2011-11-09evm: digital signature verification supportDmitry Kasatkin3-30/+142
2011-11-09integrity: digital signature verification using multiple keyringsDmitry Kasatkin4-0/+84
2011-11-02Merge branch 'for-linus' of git://github.com/richardweinberger/linuxLinus Torvalds1-1/+1
2011-11-02um: switch to use of drivers/KconfigAl Viro1-1/+1
2011-09-14evm: clean verification statusDmitry Kasatkin1-0/+1
2011-09-14evm: permit mode bits to be updatedMimi Zohar1-17/+13
2011-09-14evm: posix acls modify i_modeMimi Zohar3-5/+46
2011-09-14evm: limit verifying current security.evm integrityMimi Zohar1-34/+24
2011-09-14evm: remove TCG_TPM dependencyMimi Zohar1-2/+1
2011-09-09ima: sparse fix: include linux/ima.h in ima_main.cJames Morris1-0/+1
2011-09-09ima: sparse fix: make ima_open_policy staticJames Morris1-1/+1
2011-09-09integrity: sparse fix: move iint_initialized to integrity.hJames Morris2-1/+3
2011-08-18evm: add Kconfig TCG_TPM dependencyMimi Zohar1-1/+1
2011-08-11evm: fix evm_inode_init_security return codeMimi Zohar1-1/+1
2011-08-09EVM: ensure trusted and encypted key symbols are available to EVMJames Morris1-1/+3
2011-08-09Merge branch 'next-evm' of git://git.kernel.org/pub/scm/linux/kernel/git/zoha...James Morris16-199/+1022
2011-07-26ima: fmode_t misspelled as mode_t...Al Viro1-1/+1
2011-07-18evm: add evm_inode_setattr to prevent updating an invalid security.evmMimi Zohar1-0/+15
2011-07-18evm: permit only valid security.evm xattrs to be updatedMimi Zohar1-14/+63
2011-07-18evm: replace hmac_status with evm_statusDmitry Kasatkin3-9/+9
2011-07-18evm: evm_verify_hmac must not return INTEGRITY_UNKNOWNDmitry Kasatkin1-6/+5
2011-07-18evm: additional parameter to pass integrity cache entry 'iint'Dmitry Kasatkin1-10/+8
2011-07-18evm: crypto hash replaced by shashDmitry Kasatkin3-45/+57
2011-07-18evm: add evm_inode_init_security to initialize new filesMimi Zohar3-0/+61
2011-07-18security: imbed evm calls in security hooksMimi Zohar1-0/+1
2011-07-18evm: add support for different security.evm data typesDmitry Kasatkin3-9/+23
2011-07-18evm: re-releaseMimi Zohar10-1/+632
2011-07-18integrity: move ima inode integrity data managementMimi Zohar10-199/+242
2011-02-23ima: remove unnecessary call to ima_must_measureMimi Zohar3-15/+7
2011-02-10IMA: remove IMA imbalance checkingMimi Zohar2-104/+4
2011-02-10IMA: maintain i_readcount in the VFS layerMimi Zohar2-19/+8
2011-02-10IMA: convert i_readcount to atomicMimi Zohar2-8/+10
2011-01-03ima: fix add LSM rule bugMimi Zohar1-0/+2
2010-10-26IMA: fix the ToMToU logicEric Paris1-5/+6
2010-10-26IMA: explicit IMA i_flag to remove global lock on inode_deleteEric Paris2-5/+12
2010-10-26IMA: drop refcnt from ima_iint_cache since it isn't neededEric Paris3-30/+19
2010-10-26IMA: only allocate iint when neededEric Paris1-30/+64
2010-10-26IMA: move read counter into struct inodeEric Paris4-34/+17
2010-10-26IMA: use i_writecount rather than a private counterEric Paris3-17/+6
2010-10-26IMA: use inode->i_lock to protect read and write countersEric Paris2-34/+24
2010-10-26IMA: convert internal flags from long to charEric Paris1-2/+2
2010-10-26IMA: use unsigned int instead of long for countersEric Paris3-9/+14
2010-10-26IMA: drop the inode opencount since it isn't needed for operationEric Paris3-14/+3
2010-10-26IMA: use rbtree instead of radix tree for inode information cacheEric Paris2-36/+75
2010-09-08ima: always maintain countersMimi Zohar3-4/+9
2010-08-02ima: use generic_file_llseek for securityfsArnd Bergmann1-3/+6
2010-05-21kref: remove kref_setNeilBrown1-2/+2
2010-05-17ima: remove ACPI dependencyMimi Zohar1-3/+2
2010-05-07Revert "ima: remove ACPI dependency"James Morris1-2/+3
2010-05-06Merge branch 'master' into nextJames Morris9-0/+9
2010-05-05ima: remove ACPI dependencyMimi Zohar1-3/+2
2010-04-23IMA: include the word IMA in printk messagesEric Paris3-5/+5
2010-04-21IMA: drop the word integrity in the audit messageEric Paris1-1/+1
2010-04-21IMA: use audit_log_untrusted_string rather than %sEric Paris1-13/+20
2010-04-21IMA: handle comments in policyEric Paris1-7/+14
2010-04-21IMA: handle whitespace betterEric Paris1-3/+3
2010-04-21IMA: reject policies with unknown entriesEric Paris1-0/+1
2010-04-21IMA: set entry->action to UNKNOWN rather than hard codingEric Paris1-1/+1
2010-04-21IMA: do not allow the same rule to specify the same thing twiceEric Paris1-1/+33
2010-04-21ima: handle multiple rules per writeEric Paris3-26/+32
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo9-0/+9
2010-03-10security/ima: replace gcc specific __FUNCTION__ with __func__H Hartley Sweeten2-4/+4
2010-02-25security: fix error return path in ima_inode_allocXiaotian Feng1-2/+1
2010-02-07ima: rename PATH_CHECK to FILE_CHECKMimi Zohar4-8/+11
2010-02-07ima: rename ima_path_check to ima_file_checkMimi Zohar1-3/+3
2010-02-07ima: initialize ima before inodes can be allocatedEric Paris3-8/+3
2010-02-07fix ima breakageMimi Zohar1-144/+92
2009-12-16ima: limit imbalance msgMimi Zohar1-9/+53
2009-12-16Untangling ima mess, part 3: kill dead code in imaAl Viro1-48/+4
2009-12-16ima: call ima_inode_free ima_inode_freeEric Paris2-5/+2
2009-12-16IMA: clean up the IMA counts updating codeEric Paris2-49/+70
2009-12-16ima: only insert at inode creation timeEric Paris3-66/+14
2009-12-16ima: valid return code from ima_inode_allocEric Paris1-3/+1
2009-12-03Merge branch 'master' into nextJames Morris2-7/+7
2009-11-19ima: replace GFP_KERNEL with GFP_NOFSMimi Zohar1-2/+2
2009-10-25LSM: imbed ima calls in the security hooksMimi Zohar1-0/+1
2009-10-01const: constify remaining file_operationsAlexey Dobriyan1-5/+5
2009-09-23seq_file: constify seq_operationsJames Morris1-2/+2
2009-09-07IMA: update ima_counts_putMimi Zohar1-1/+5
2009-08-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-0/+4
2009-08-27IMA: iint put in ima_counts_get and putEric Paris1-0/+4
2009-08-24ima: hashing large files bug fixMimi Zohar1-2/+4
2009-06-29integrity: add ima_counts_put (updated)Mimi Zohar1-1/+28
2009-06-29integrity: ima audit hash_exists fixMimi Zohar1-1/+2
2009-06-11Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds7-86/+98
2009-06-05integrity: ima audit dentry_open failureMimi Zohar1-4/+9
2009-05-22integrity: path_check updateMimi Zohar1-19/+29
2009-05-22IMA: Add __init notation to ima functionsEric Paris5-7/+7
2009-05-22IMA: Minimal IMA policy and boot param for TCB IMA policyEric Paris1-3/+27
2009-05-19SELinux: move SELINUX_MAGIC into magic.hEric Paris1-5/+3
2009-05-15IMA: do not measure everything opened by root by defaultEric Paris1-2/+0
2009-05-15IMA: remove read permissions on the ima policy fileEric Paris1-1/+5
2009-05-12IMA: open all files O_LARGEFILEEric Paris1-1/+2
2009-05-12IMA: Handle dentry_open failuresEric Paris1-4/+6
2009-05-12IMA: use current_cred() instead of current->credEric Paris2-2/+2
2009-05-06integrity: remove __setup auditing msgsMimi Zohar2-25/+4
2009-05-06integrity: use audit_log_stringMimi Zohar1-13/+4
2009-05-06integrity: lsm audit rule matching fixMimi Zohar1-4/+4
2009-04-15rculist: use list_entry_rcu in places where it's appropriateJiri Pirko1-2/+2
2009-02-23integrity: ima iint radix_tree_lookup locking fixMimi Zohar1-0/+2
2009-02-21integrity: ima scatterlist bug fixMimi Zohar1-2/+2
2009-02-13ima: fix build errorRandy Dunlap1-2/+2
2009-02-12integrity: audit updateMimi Zohar6-21/+25
2009-02-06IMA: fix ima_delete_rules() definitionJames Morris1-1/+1
2009-02-06Integrity: IMA file free imbalanceMimi Zohar3-0/+61
2009-02-06integrity: IMA policy openMimi Zohar1-1/+16
2009-02-06integrity: IMA policyMimi Zohar4-4/+386
2009-02-06integrity: IMA displayMimi Zohar5-2/+314
2009-02-06integrity: IMA as an integrity service providerMimi Zohar11-0/+1422
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-21 06:08:38 +0000