Log - 1f69afce382f2858c825f027ed5afa97ec532f3e - kernel/msm-5.4

74673fc Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
f218a29 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
769e470 Merge tag 'kconfig-v4.21' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild by Linus Torvalds · 6 years ago
ca79b0c mm: convert totalram_pages and totalhigh_pages variables to atomic by Arun KS · 6 years ago
b71acb0 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 6 years ago
3f03bf9 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
047ce6d Merge tag 'audit-pr-20181224' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
8636a1f treewide: surround Kconfig file paths with double quotes by Masahiro Yamada · 6 years ago
b49d564 security: integrity: partial revert of make ima_main explicitly non-modular by Paul Gortmaker · 6 years ago
1a9430d ima: cleanup the match_token policy code by Mimi Zohar · 6 years ago
c7f7e58 integrity: Remove references to module keyring by Thiago Jung Bauermann · 6 years ago
0db51ef Merge tag 'tpmdd-next-20181217' of git://git.infradead.org/users/jjs/linux-tpmdd into next-tpm by James Morris · 6 years ago
5580b4a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity by James Morris · 6 years ago
8bd8ea1 Merge tag 'v4.20-rc7' into next-general by James Morris · 6 years ago
eed9de3 ima: Use inode_is_open_for_write by Nikolay Borisov · 6 years ago
d7cecb6 ima: Support platform keyring for kernel appraisal by Nayna Jain · 6 years ago
386b49f efi: Allow the "db" UEFI variable to be suppressed by Josh Boyer · 6 years ago
15ea0e1 efi: Import certificates from UEFI Secure Boot by Josh Boyer · 6 years ago
0bc9ae3 efi: Add an EFI signature blob parser by Dave Howells · 6 years ago
60740ac integrity: Load certs to the platform keyring by Nayna Jain · 6 years ago
9dc92c4 integrity: Define a trusted platform keyring by Nayna Jain · 6 years ago
876979c security: audit and remove any unnecessary uses of module.h by Paul Gortmaker · 6 years ago
3aafb1f security: integrity: make evm_main explicitly non-modular by Paul Gortmaker · 6 years ago
4f83d5e security: integrity: make ima_main explicitly non-modular by Paul Gortmaker · 6 years ago
060190f ima: don't measure/appraise files on efivarfs by Mimi Zohar · 6 years ago
d958083 x86/ima: define arch_get_ima_policy() for x86 by Eric Richter · 6 years ago
6191706 ima: add support for arch specific policies by Nayna Jain · 6 years ago
c52657d ima: refactor ima_init_policy() by Nayna Jain · 6 years ago
b5ca117 ima: prevent kexec_load syscall based on runtime secureboot flag by Nayna Jain · 6 years ago
2a1fe21 audit: use current whenever possible by Paul Moore · 6 years ago
3d234b3 crypto: drop mask=CRYPTO_ALG_ASYNC from 'shash' tfm allocations by Eric Biggers · 6 years ago
fd35f19 integrity: support new struct public_key_signature encoding field by Mimi Zohar · 6 years ago
59637d5 integrity: support new struct public_key_signature encoding field by Mimi Zohar · 6 years ago
95adc6b tpm: use u32 instead of int for PCR index by Tomas Winkler · 6 years ago
57ce66d Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
07aed2f LSM: Record LSM name in struct lsm_info by Kees Cook · 6 years ago
3d6e5f6 LSM: Convert security_initcall() into DEFINE_LSM() by Kees Cook · 6 years ago
5b89c1b LSM: Convert from initcall to struct lsm_info by Kees Cook · 6 years ago
a408e4a ima: open a new file instance if no read permissions by Goldwyn Rodrigues · 6 years ago
1e4c8da ima: fix showing large 'violations' or 'runtime_measurements_count' by Eric Biggers · 6 years ago
2ab5daf security/integrity: remove unnecessary 'init_keyring' variable by Eric Biggers · 6 years ago
b2724d5 security/integrity: constify some read-only data by Eric Biggers · 6 years ago
f91e654 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
c715ebe Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
92d4a03 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
ec403d8 ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL instead by Stefan Berger · 6 years ago
5c2a640 ima: Use tpm_default_chip() and call TPM functions with a tpm_chip by Stefan Berger · 6 years ago
3dd0f18 EVM: fix return value check in evm_write_xattrs() by Wei Yongjun · 6 years ago
6eb864c integrity: prevent deadlock during digsig verification. by Mikhail Kurinnoi · 6 years ago
5feeb61 evm: Allow non-SHA1 digital signatures by Matthew Garrett · 6 years ago
e2861fa evm: Don't deadlock if a crypto algorithm is unavailable by Matthew Garrett · 6 years ago
ac2409a integrity: silence warning when CONFIG_SECURITYFS is not enabled by Sudeep Holla · 6 years ago
dba31ee ima: Differentiate auditing policy rules from "audit" actions by Stefan Berger · 6 years ago
2afd020 ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set by Stefan Berger · 6 years ago
3d2859d ima: Use audit_log_format() rather than audit_log_string() by Stefan Berger · 6 years ago
8a3bcaf ima: Call audit_log_string() rather than logging it untrusted by Stefan Berger · 6 years ago
4f0496d ima: based on policy warn about loading firmware (pre-allocated buffer) by Mimi Zohar · 6 years ago
c77b8cd module: replace the existing LSM hook in init_module by Mimi Zohar · 6 years ago
ef96837 ima: add build time policy by Mimi Zohar · 6 years ago
fed2512 ima: based on policy require signed firmware (sysfs fallback) by Mimi Zohar · 6 years ago
16c267a ima: based on policy require signed kexec kernel images by Mimi Zohar · 6 years ago
6035a27 IMA: don't propagate opened through the entire thing by Al Viro · 6 years ago
00d535a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
8b5c6a3 Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
b5c90a7 EVM: unlock on error path in evm_read_xattrs() by Dan Carpenter · 6 years ago
a41d80a EVM: prevent array underflow in evm_write_xattrs() by Dan Carpenter · 6 years ago
72acd64 EVM: Fix null dereference on xattr when xattr fails to allocate by Colin Ian King · 6 years ago
825b865 EVM: fix memory leak of temporary buffer 'temp' by Colin Ian King · 6 years ago
53b626f IMA: use list_splice_tail_init_rcu() instead of its open coded variant by Petko Manolov · 6 years ago
b4df860 ima: use match_string() helper by Yisheng Xie · 6 years ago
6f0911a ima: fix updating the ima_appraise flag by Mimi Zohar · 7 years ago
fd90bc5 ima: based on policy verify firmware signatures (pre-allocated buffer) by Mimi Zohar · 7 years ago
f1b08bb ima: define a new policy condition based on the filesystem name by Mimi Zohar · 7 years ago
fa516b6 EVM: Allow runtime modification of the set of verified xattrs by Matthew Garrett · 7 years ago
21af766 EVM: turn evm_config_xattrnames into a list by Matthew Garrett · 7 years ago
0c343af integrity: Add an integrity directory in securityfs by Matthew Garrett · 7 years ago
4ecd993 ima: Remove unused variable ima_initialized by Petr Vorel · 7 years ago
de63676 ima: Unify logging by Petr Vorel · 7 years ago
ffb122d ima: Reflect correct permissions for policy by Petr Vorel · 7 years ago
cdfb6b3 audit: use inline function to get audit context by Richard Guy Briggs · 7 years ago
a3a5c96 evm: Don't update hmacs in user ns mounts by Seth Forshee · 7 years ago
ab60368 ima: Fallback to the builtin hash algorithm by Petr Vorel · 7 years ago
1c070b1 ima: Add smackfs to the default appraise/measure list by Martin Townsend · 7 years ago
70946c4a evm: check for remount ro in progress before writing by Sascha Hauer · 7 years ago
f5e51fa ima: Improvements in ima_appraise_measurement() by Thiago Jung Bauermann · 7 years ago
1775cb8 ima: Simplify ima_eventsig_init() by Thiago Jung Bauermann · 7 years ago
11c60f2 integrity: Remove unused macro IMA_ACTION_RULE_FLAGS by Thiago Jung Bauermann · 7 years ago
e456ef8 ima: drop vla in ima_audit_measurement() by Tycho Andersen · 7 years ago
fac37c62 ima: Fix Kconfig to select TPM 2.0 CRB interface by Jiandi An · 7 years ago
17d7b0a evm: Constify *integrity_status_msg[] by Hernán Gonzalez · 7 years ago
1a82cee evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.c by Hernán Gonzalez · 7 years ago
9e67028 ima: fail signature verification based on policy by Mimi Zohar · 7 years ago
a9a4935 ima: clear IMA_HASH by Mimi Zohar · 7 years ago
d77ccdc ima: re-evaluate files on privileged mounted filesystems by Mimi Zohar · 7 years ago
57b56ac ima: fail file signature verification on non-init mounted filesystems by Mimi Zohar · 7 years ago
d906c10 IMA: Support using new creds in appraisal policy by Matthew Garrett · 7 years ago
120f3b1 integrity/security: fix digsig.c build error with header file by Randy Dunlap · 7 years ago
6fbac201f9 Merge tag 'iversion-v4.16-2' of git://git.kernel.org/pub/scm/linux/kernel/git/jlayton/linux by Linus Torvalds · 7 years ago
e259807 ima: re-initialize iint->atomic_flags by Mimi Zohar · 7 years ago
c472c07 iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw} by Goffredo Baroncelli · 7 years ago