aboutsummaryrefslogtreecommitdiff
path: root/security/integrity/evm
AgeCommit message (Expand)AuthorFilesLines
2018-10-10security/integrity: constify some read-only dataGravatar Eric Biggers 1-2/+2
2018-07-22EVM: fix return value check in evm_write_xattrs()Gravatar Wei Yongjun 1-2/+2
2018-07-18evm: Allow non-SHA1 digital signaturesGravatar Matthew Garrett 4-31/+46
2018-07-18evm: Don't deadlock if a crypto algorithm is unavailableGravatar Matthew Garrett 1-1/+2
2018-06-07Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Gravatar Linus Torvalds 5-42/+271
2018-06-01EVM: unlock on error path in evm_read_xattrs()Gravatar Dan Carpenter 1-1/+3
2018-05-31EVM: prevent array underflow in evm_write_xattrs()Gravatar Dan Carpenter 1-1/+1
2018-05-31EVM: Fix null dereference on xattr when xattr fails to allocateGravatar Colin Ian King 1-2/+4
2018-05-31EVM: fix memory leak of temporary buffer 'temp'Gravatar Colin Ian King 1-0/+2
2018-05-18EVM: Allow runtime modification of the set of verified xattrsGravatar Matthew Garrett 4-4/+188
2018-05-18EVM: turn evm_config_xattrnames into a listGravatar Matthew Garrett 3-39/+57
2018-05-17integrity: Add an integrity directory in securityfsGravatar Matthew Garrett 1-3/+24
2018-05-03evm: Don't update hmacs in user ns mountsGravatar Seth Forshee 1-1/+2
2018-03-25evm: check for remount ro in progress before writingGravatar Sascha Hauer 1-2/+6
2018-03-23evm: Constify *integrity_status_msg[]Gravatar Hernán Gonzalez 1-1/+1
2018-03-23evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.cGravatar Hernán Gonzalez 3-4/+3
2017-12-11EVM: Add support for portable signature formatGravatar Matthew Garrett 3-20/+86
2017-12-11EVM: Allow userland to permit modification of EVM-protected metadataGravatar Matthew Garrett 3-12/+53
2017-11-08EVM: Only complain about a missing HMAC key onceGravatar Matthew Garrett 1-1/+1
2017-11-08EVM: Allow userspace to signal an RSA key has been loadedGravatar Matthew Garrett 2-12/+20
2017-11-08EVM: Include security.apparmor in EVM measurementsGravatar Matthew Garrett 1-0/+3
2017-06-05fs: switch ->s_uuid to uuid_tGravatar Christoph Hellwig 1-1/+1
2017-03-02sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sche...Gravatar Ingo Molnar 1-0/+2
2016-12-14Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Gravatar Linus Torvalds 1-2/+10
2016-12-02Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"Gravatar Eric W. Biederman 1-2/+10
2016-11-13security/integrity: Harden against malformed xattrsGravatar Seth Forshee 1-0/+4
2016-10-07xattr: Add __vfs_{get,set,remove}xattr helpersGravatar Andreas Gruenbacher 2-5/+6
2016-07-05evm: Translate user/group ids relative to s_user_ns when computing HMACGravatar Seth Forshee 1-2/+2
2016-04-11->getxattr(): pass dentry and inode as separate argumentsGravatar Al Viro 1-1/+1
2016-04-10don't bother with ->d_inode->i_sb - it's always equal to ->d_sbGravatar Al Viro 1-2/+2
2016-02-12EVM: Use crypto_memneq() for digest comparisonsGravatar Ryan Ware 1-1/+2
2015-12-15evm: EVM_LOAD_X509 depends on EVMGravatar Arnd Bergmann 1-1/+1
2015-12-15evm: reset EVM status when file attributes changeGravatar Dmitry Kasatkin 1-0/+13
2015-12-15evm: provide a function to set the EVM key from the kernelGravatar Dmitry Kasatkin 2-14/+46
2015-12-15evm: enable EVM when X509 certificate is loadedGravatar Dmitry Kasatkin 4-3/+14
2015-12-15evm: load an x509 certificate from the kernelGravatar Dmitry Kasatkin 2-0/+24
2015-11-23integrity: define '.evm' as a builtin 'trusted' keyringGravatar Dmitry Kasatkin 1-3/+5
2015-10-21KEYS: Merge the type-specific data with the payload dataGravatar David Howells 1-1/+1
2015-05-21evm: fix potential race when removing xattrsGravatar Dmitry Kasatkin 1-4/+3
2015-05-21evm: labeling pseudo filesystems exceptionGravatar Mimi Zohar 1-0/+11
2015-04-15VFS: security/: d_backing_inode() annotationsGravatar David Howells 2-11/+11
2015-01-07kconfig: use bool instead of boolean for type definition attributesGravatar Christoph Jaeger 1-1/+1
2014-12-14Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Gravatar Linus Torvalds 1-3/+8
2014-10-28evm: check xattr value length and type in evm_inode_setxattr()Gravatar Dmitry Kasatkin 1-3/+6
2014-10-07evm: skip replacing EVM signature with HMAC on read-only filesystemGravatar Dmitry Kasatkin 1-3/+8
2014-09-09integrity: base integrity subsystem kconfig options on integrityGravatar Dmitry Kasatkin 1-8/+0
2014-09-09evm: properly handle INTEGRITY_NOXATTRS EVM statusGravatar Dmitry Kasatkin 1-0/+7
2014-09-08evm: prevent passing integrity check if xattr read failsGravatar Dmitry Kasatkin 1-3/+4
2014-09-02evm: fix checkpatch warningsGravatar Dmitry Kasatkin 1-3/+0
2014-06-12evm: prohibit userspace writing 'security.evm' HMAC valueGravatar Mimi Zohar 1-2/+10