aboutsummaryrefslogtreecommitdiff
path: root/security/integrity/platform_certs
AgeCommit message (Expand)AuthorFilesLines
2022-05-23certs: Factor out the blacklist hash creationGravatar Mickaël Salaün 1-24/+2
2022-03-08integrity: Only use machine keyring when uefi_check_trust_mok_keys is trueGravatar Eric Snowberg 2-1/+17
2022-03-08integrity: Trust MOK keys if MokListTrustedRT foundGravatar Eric Snowberg 1-0/+19
2022-03-08integrity: add new keyring handler for mok keysGravatar Eric Snowberg 3-3/+23
2022-03-08integrity: Introduce a Linux keyring called machineGravatar Eric Snowberg 1-0/+42
2022-03-08integrity: Fix warning about missing prototypesGravatar Eric Snowberg 1-0/+1
2021-12-24integrity: Do not load MOK and MOKx when secure boot be disabledGravatar Lee, Chun-Yi 1-0/+5
2021-08-27efi: Don't use knowledge about efi_guid_t internalsGravatar Andy Shevchenko 1-1/+1
2021-03-11integrity: Load mokx variables into the blacklist keyringGravatar Eric Snowberg 1-2/+18
2021-03-11certs: Add EFI_CERT_X509_GUID support for dbx entriesGravatar Eric Snowberg 1-0/+11
2020-09-16integrity: Load certs from the EFI MOK config tableGravatar Lenny Szubowicz 1-0/+22
2020-09-16integrity: Move import of MokListRT certs to a separate routineGravatar Lenny Szubowicz 1-19/+44
2020-02-26Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi...Gravatar Ingo Molnar 1-1/+1
2020-02-23integrity: Check properly whether EFI GetVariable() is availableGravatar Ard Biesheuvel 1-1/+1
2020-02-18efi: Only print errors about failing to get certs if EFI vars are foundGravatar Javier Martinez Canillas 1-14/+26
2019-11-29x86/efi: remove unused variablesGravatar YueHaibing 1-5/+0
2019-11-13powerpc: Load firmware trusted keys/hashes into kernel keyringGravatar Nayna Jain 1-0/+96
2019-11-13x86/efi: move common keyring handler functions to new fileGravatar Nayna Jain 3-66/+113
2019-07-10Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Gravatar Linus Torvalds 1-10/+4
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLGravatar David Howells 1-4/+10
2019-04-26s390/ipl: read IPL report at early bootGravatar Martin Schwidefsky 1-0/+36
2018-12-12efi: Allow the "db" UEFI variable to be suppressedGravatar Josh Boyer 1-10/+35
2018-12-12efi: Import certificates from UEFI Secure BootGravatar Josh Boyer 1-0/+169
2018-12-12efi: Add an EFI signature blob parserGravatar Dave Howells 1-0/+108
2018-12-12integrity: Load certs to the platform keyringGravatar Nayna Jain 1-0/+23
2018-12-12integrity: Define a trusted platform keyringGravatar Nayna Jain 1-0/+35