Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.9
/
013e379a3094ff2898f8d33cfbff1573d471ee14
/
security
/
integrity
613317b
EVM: Use crypto_memneq() for digest comparisons
by Ryan Ware
· 9 years ago
5955102
wrappers for ->i_mutex access
by Al Viro
· 9 years ago
5807fca
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 9 years ago
cc4e719
fix the leak in integrity_read_file()
by Al Viro
· 9 years ago
6427e6c
ima: ima_write_policy() limit locking
by Petko Manolov
· 9 years ago
0112721
IMA: policy can be updated zero times
by Sasha Levin
· 9 years ago
92cc916
security/integrity: make ima/ima_mok.c explicitly non-modular
by Paul Gortmaker
· 9 years ago
6ad6afa
ima: update appraise flags after policy update completes
by Mimi Zohar
· 9 years ago
501f1bd
IMA: prevent keys on the .ima_blacklist from being removed
by Mimi Zohar
· 9 years ago
80eae20
IMA: allow reading back the current IMA policy
by Petko Manolov
· 9 years ago
41c89b6
IMA: create machine owner and blacklist keyrings
by Petko Manolov
· 9 years ago
38d859f
IMA: policy can now be updated multiple times
by Petko Manolov
· 9 years ago
05d3884
evm: EVM_LOAD_X509 depends on EVM
by Arnd Bergmann
· 9 years ago
523b74b
evm: reset EVM status when file attributes change
by Dmitry Kasatkin
· 9 years ago
7626676
evm: provide a function to set the EVM key from the kernel
by Dmitry Kasatkin
· 9 years ago
26ddabf
evm: enable EVM when X509 certificate is loaded
by Dmitry Kasatkin
· 9 years ago
2ce523e
evm: load an x509 certificate from the kernel
by Dmitry Kasatkin
· 9 years ago
f4dc377
integrity: define '.evm' as a builtin 'trusted' keyring
by Dmitry Kasatkin
· 9 years ago
71baba4
mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM
by Mel Gorman
· 9 years ago
146aa8b
KEYS: Merge the type-specific data with the payload data
by David Howells
· 9 years ago
72e1eed
integrity: prevent loading untrusted certificates on the IMA trusted keyring
by Dmitry Kasatkin
· 9 years ago
02201e3
Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
by Linus Torvalds
· 9 years ago
24fd03c
ima: update builtin policies
by Mimi Zohar
· 10 years ago
4351c29
ima: extend "mask" policy matching support
by Mimi Zohar
· 10 years ago
139069e
ima: add support for new "euid" policy condition
by Mimi Zohar
· 10 years ago
45b2613
ima: fix ima_show_template_data_ascii()
by Mimi Zohar
· 10 years ago
9c27847
kernel/params: constify struct kernel_param_ops uses
by Luis R. Rodriguez
· 10 years ago
8d94eb9
ima: pass iint to ima_add_violation()
by Roberto Sassu
· 10 years ago
23b5741
ima: wrap event related data to the new ima_event_data structure
by Roberto Sassu
· 10 years ago
9d03a72
integrity: add validity checks for 'path' parameter
by Dmitry Kasatkin
· 10 years ago
7c51bb0
evm: fix potential race when removing xattrs
by Dmitry Kasatkin
· 10 years ago
5101a18
evm: labeling pseudo filesystems exception
by Mimi Zohar
· 10 years ago
a18d0cb
ima: remove definition of IMA_X509_PATH
by Dmitry Kasatkin
· 10 years ago
c68ed80
ima: limit file hash setting by user to fix and log modes
by Dmitry Kasatkin
· 10 years ago
cd025f7
ima: do not measure or appraise the NSFS filesystem
by Mimi Zohar
· 10 years ago
6438de9
ima: skip measurement of cgroupfs files and update documentation
by Roberto Sassu
· 10 years ago
5577857
ima: cleanup ima_init_policy() a little
by Dan Carpenter
· 10 years ago
c6f493d
VFS: security/: d_backing_inode() annotations
by David Howells
· 10 years ago
b11a278
Merge branch 'kconfig' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild
by Linus Torvalds
· 10 years ago
11cd64a
ima: /proc/keys is now mandatory
by David Howells
· 10 years ago
6341e62
kconfig: use bool instead of boolean for type definition attributes
by Christoph Jaeger
· 10 years ago
d0bffab
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into for-linus
by James Morris
· 10 years ago
67e2c38
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 10 years ago
ba00410
Merge branch 'iov_iter' into for-next
by Al Viro
· 10 years ago
63a0eb7
ima: Fix build failure on powerpc when TCG_IBMVTPM dependencies are not met
by Michael Ellerman
· 10 years ago
b583043
kill f_dentry uses
by Al Viro
· 10 years ago
6fb5032
VFS: refactor vfs_read()
by Dmitry Kasatkin
· 10 years ago
c57782c
ima: require signature based appraisal
by Dmitry Kasatkin
· 10 years ago
c9cd2ce
integrity: provide a hook to load keys when rootfs is ready
by Dmitry Kasatkin
· 10 years ago
fd5f4e90
ima: load x509 certificate from the kernel
by Dmitry Kasatkin
· 10 years ago
65d543b
integrity: provide a function to load x509 certificate from the kernel
by Dmitry Kasatkin
· 10 years ago
e3c4abb
integrity: define a new function integrity_read_file()
by Dmitry Kasatkin
· 10 years ago
6c880ad
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into for-linus
by James Morris
· 10 years ago
3b1deef
evm: check xattr value length and type in evm_inode_setxattr()
by Dmitry Kasatkin
· 10 years ago
a48fda9
ima: check xattr value length and type in the ima_inode_setxattr()
by Dmitry Kasatkin
· 10 years ago
357aabe
security, crypto: LLVMLinux: Remove VLAIS from ima_crypto.c
by Behan Webster
· 11 years ago
c2426d2
ima: added support for new kernel cmdline parameter ima_template_fmt
by Roberto Sassu
· 10 years ago
1bd7fac
ima: allocate field pointers array on demand in template_desc_init_fields()
by Roberto Sassu
· 10 years ago
9f3166b
ima: don't allocate a copy of template_fmt in template_desc_init_fields()
by Roberto Sassu
· 10 years ago
7dbdb42
ima: display template format in meas. list if template name length is zero
by Roberto Sassu
· 10 years ago
71fed2e
ima: added error messages to template-related functions
by Roberto Sassu
· 10 years ago
0716abb
ima: use atomic bit operations to protect policy update interface
by Dmitry Kasatkin
· 10 years ago
7178784
ima: ignore empty and with whitespaces policy lines
by Dmitry Kasatkin
· 10 years ago
272a6e9
ima: no need to allocate entry for comment
by Dmitry Kasatkin
· 10 years ago
78bb5d0
ima: report policy load status
by Dmitry Kasatkin
· 10 years ago
456f5fd
ima: use path names cache
by Dmitry Kasatkin
· 10 years ago
c2baec7
evm: skip replacing EVM signature with HMAC on read-only filesystem
by Dmitry Kasatkin
· 10 years ago
d16a858
integrity: add missing '__init' keyword for integrity_init_keyring()
by Dmitry Kasatkin
· 10 years ago
0f34a00
ima: check ima_policy_flag in the ima_file_free() hook
by Dmitry Kasatkin
· 10 years ago
594081e
integrity: do zero padding of the key id
by Dmitry Kasatkin
· 10 years ago
1b68bdf
ima: detect violations for mmaped files
by Roberto Sassu
· 10 years ago
f7a859f
ima: fix race condition on ima_rdwr_violation_check and process_measurement
by Roberto Sassu
· 10 years ago
a756024
ima: added ima_policy_flag variable
by Roberto Sassu
· 10 years ago
be39ffc
ima: return an error code from ima_add_boot_aggregate()
by Roberto Sassu
· 10 years ago
2faa6ef
ima: provide 'ima_appraise=log' kernel option
by Dmitry Kasatkin
· 11 years ago
31b70f6
ima: move keyring initialization to ima_init()
by Dmitry Kasatkin
· 10 years ago
a2d61ed
integrity: make integrity files as 'integrity' module
by Dmitry Kasatkin
· 10 years ago
7ef84e6
integrity: base integrity subsystem kconfig options on integrity
by Dmitry Kasatkin
· 11 years ago
1ae8f41
integrity: move asymmetric keys config option
by Dmitry Kasatkin
· 11 years ago
b4148db
ima: initialize only required template
by Dmitry Kasatkin
· 11 years ago
17f4bad
ima: remove usage of filename parameter
by Dmitry Kasatkin
· 10 years ago
86f2bc0
ima: remove unnecessary appraisal test
by Dmitry Kasatkin
· 10 years ago
e4a9c51
ima: add missing '__init' keywords
by Dmitry Kasatkin
· 10 years ago
3a8a2ea
ima: remove unnecessary extra variable
by Dmitry Kasatkin
· 10 years ago
f68c05f
ima: simplify conditional statement to improve performance
by Dmitry Kasatkin
· 10 years ago
65d98f3
integrity: remove declaration of non-existing functions
by Dmitry Kasatkin
· 10 years ago
d9a2e5d
integrity: prevent flooding with 'Request for unknown key'
by Dmitry Kasatkin
· 10 years ago
3034a14
ima: pass 'opened' flag to identify newly created files
by Dmitry Kasatkin
· 10 years ago
3dcbad5
evm: properly handle INTEGRITY_NOXATTRS EVM status
by Dmitry Kasatkin
· 10 years ago
b151d6b
ima: provide flag to identify new empty files
by Dmitry Kasatkin
· 10 years ago
1f10097
evm: prevent passing integrity check if xattr read fails
by Dmitry Kasatkin
· 10 years ago
e7d021e
evm: fix checkpatch warnings
by Dmitry Kasatkin
· 10 years ago
27cd1fc
ima: fix fallback to use new_sync_read()
by Dmitry Kasatkin
· 11 years ago
23c19e2
ima: prevent buffer overflow in ima_alloc_tfm()
by Dmitry Kasatkin
· 10 years ago
9a8d289
ima: fix ima_alloc_atfm()
by Mimi Zohar
· 10 years ago
5a9196d
ima: add support for measuring and appraising firmware
by Mimi Zohar
· 10 years ago
7d2ce23
ima: define '.ima' as a builtin 'trusted' keyring
by Mimi Zohar
· 11 years ago
32c2e67
ima: provide double buffering for hash calculation
by Dmitry Kasatkin
· 11 years ago
6edf7a8
ima: introduce multi-page collect buffers
by Dmitry Kasatkin
· 11 years ago
3bcced3
ima: use ahash API for file hash calculation
by Dmitry Kasatkin
· 11 years ago
Next »