aboutsummaryrefslogtreecommitdiff
path: root/security/loadpin
AgeCommit message (Expand)AuthorFilesLines
2024-04-15lsm: remove the now superfluous sentinel element from ctl_table arrayGravatar Joel Granados 1-1/+0
2023-11-12lsm: mark the lsm_id variables are marked as staticGravatar Paul Moore 1-1/+1
2023-11-12LSM: Identify modules by more than nameGravatar Casey Schaufler 1-1/+8
2023-08-25LoadPin: Annotate struct dm_verity_loadpin_trusted_root_digest with __counted_byGravatar Kees Cook 1-2/+1
2023-04-27Merge tag 'sysctl-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m...Gravatar Linus Torvalds 1-7/+1
2023-04-13loadpin: simplify sysctls use with register_sysctl()Gravatar Luis Chamberlain 1-7/+1
2023-03-20selinux: remove the runtime disable functionalityGravatar Paul Moore 1-1/+1
2023-01-19LoadPin: Allow filesystem switch when not enforcingGravatar Kees Cook 1-5/+11
2023-01-19LoadPin: Move pin reporting cleanly out of lockingGravatar Kees Cook 1-9/+6
2023-01-19LoadPin: Refactor sysctl initializationGravatar Kees Cook 1-16/+19
2023-01-19LoadPin: Refactor read-only check into a helperGravatar Kees Cook 1-12/+21
2022-12-14LoadPin: Ignore the "contents" argument of the LSM hooksGravatar Kees Cook 1-12/+18
2022-09-07LoadPin: Require file with verity root digests to have a headerGravatar Matthias Kaehlcke 2-2/+21
2022-09-07LoadPin: Fix Kconfig doc about format of file with verity digestsGravatar Matthias Kaehlcke 1-1/+1
2022-08-16LoadPin: Return EFAULT on copy_from_user() failuresGravatar Kees Cook 1-4/+2
2022-07-08LoadPin: Enable loading from trusted dm-verity devicesGravatar Matthias Kaehlcke 2-1/+182
2022-05-16loadpin: stop using bdevnameGravatar Christoph Hellwig 1-4/+1
2020-10-05LSM: Add "contents" flag to kernel_read_file hookGravatar Kees Cook 1-2/+12
2020-10-05LSM: Introduce kernel_post_load_data() hookGravatar Kees Cook 1-1/+1
2020-10-05fs/kernel_read_file: Split into separate include fileGravatar Scott Branden 1-0/+1
2020-06-24block: move block-related definitions out of fs.hGravatar Christoph Hellwig 1-0/+1
2019-07-18proc/sysctl: add shared variables for range checkGravatar Matteo Croce 1-4/+2
2019-07-11Merge tag 'loadpin-v5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Gravatar Linus Torvalds 1-0/+48
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Gravatar Thomas Gleixner 1-9/+1
2019-05-31security/loadpin: Allow to exclude specific file typesGravatar Ke Wu 1-0/+48
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigGravatar Thomas Gleixner 2-0/+2
2019-01-08LoadPin: Initialize as ordered LSMGravatar Kees Cook 1-1/+7
2018-10-18LoadPin: Rename boot param "enabled" to "enforce"Gravatar Kees Cook 2-12/+13
2018-10-18LoadPin: Report friendly block device nameGravatar Kees Cook 1-1/+4
2018-07-16module: replace the existing LSM hook in init_moduleGravatar Mimi Zohar 1-0/+6
2018-02-22get rid of pointless includes of fs_struct.hGravatar Al Viro 1-1/+0
2017-03-06security: mark LSM hooks as __ro_after_initGravatar James Morris 1-1/+1
2017-01-19LSM: Add /sys/kernel/security/lsmGravatar Casey Schaufler 1-1/+1
2016-05-17LSM: LoadPin: provide enablement CONFIGGravatar Kees Cook 2-6/+15
2016-04-21LSM: LoadPin for kernel file loading restrictionsGravatar Kees Cook 3-0/+201