summaryrefslogtreecommitdiff
path: root/security/integrity/ima
AgeCommit message (Expand)Author
2018-12-11ima: don't measure/appraise files on efivarfsMimi Zohar
2018-12-11x86/ima: define arch_get_ima_policy() for x86Eric Richter
2018-12-11ima: add support for arch specific policiesNayna Jain
2018-12-11ima: refactor ima_init_policy()Nayna Jain
2018-12-11ima: prevent kexec_load syscall based on runtime secureboot flagNayna Jain
2018-10-10ima: open a new file instance if no read permissionsGoldwyn Rodrigues
2018-10-10ima: fix showing large 'violations' or 'runtime_measurements_count'Eric Biggers
2018-10-10security/integrity: constify some read-only dataEric Biggers
2018-08-15Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2018-08-15Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmor...Linus Torvalds
2018-08-15Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2018-07-28ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL insteadStefan Berger
2018-07-28ima: Use tpm_default_chip() and call TPM functions with a tpm_chipStefan Berger
2018-07-18ima: Differentiate auditing policy rules from "audit" actionsStefan Berger
2018-07-18ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not setStefan Berger
2018-07-18ima: Use audit_log_format() rather than audit_log_string()Stefan Berger
2018-07-18ima: Call audit_log_string() rather than logging it untrustedStefan Berger
2018-07-16ima: based on policy warn about loading firmware (pre-allocated buffer)Mimi Zohar
2018-07-16module: replace the existing LSM hook in init_moduleMimi Zohar
2018-07-16ima: add build time policyMimi Zohar
2018-07-16ima: based on policy require signed firmware (sysfs fallback)Mimi Zohar
2018-07-16ima: based on policy require signed kexec kernel imagesMimi Zohar
2018-07-12IMA: don't propagate opened through the entire thingAl Viro
2018-06-07Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2018-05-31IMA: use list_splice_tail_init_rcu() instead of its open coded variantPetko Manolov
2018-05-31ima: use match_string() helperYisheng Xie
2018-05-22ima: fix updating the ima_appraise flagMimi Zohar
2018-05-22ima: based on policy verify firmware signatures (pre-allocated buffer)Mimi Zohar
2018-05-22ima: define a new policy condition based on the filesystem nameMimi Zohar
2018-05-17integrity: Add an integrity directory in securityfsMatthew Garrett
2018-05-17ima: Remove unused variable ima_initializedPetr Vorel
2018-05-17ima: Unify loggingPetr Vorel
2018-05-17ima: Reflect correct permissions for policyPetr Vorel
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs
2018-03-25ima: Fallback to the builtin hash algorithmPetr Vorel
2018-03-25ima: Add smackfs to the default appraise/measure listMartin Townsend
2018-03-25ima: Improvements in ima_appraise_measurement()Thiago Jung Bauermann
2018-03-25ima: Simplify ima_eventsig_init()Thiago Jung Bauermann
2018-03-25ima: drop vla in ima_audit_measurement()Tycho Andersen
2018-03-25ima: Fix Kconfig to select TPM 2.0 CRB interfaceJiandi An
2018-03-23ima: fail signature verification based on policyMimi Zohar
2018-03-23ima: clear IMA_HASHMimi Zohar
2018-03-23ima: re-evaluate files on privileged mounted filesystemsMimi Zohar
2018-03-23ima: fail file signature verification on non-init mounted filesystemsMimi Zohar
2018-03-23IMA: Support using new creds in appraisal policyMatthew Garrett
2018-02-01iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw}Goffredo Baroncelli
2018-01-31Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmor...Linus Torvalds
2018-01-31Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2018-01-29IMA: switch IMA over to new i_version APIJeff Layton
2018-01-18ima/policy: fix parsing of fsuuidMike Rapoport