Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-5.4
/
e64392019c0537829ef1d555451c513f1046ae2a
/
security
/
integrity
9641b8c
s390/ipl: read IPL report at early boot
by Martin Schwidefsky
· 6 years ago
5af7f11
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
c3665a6
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
be37f21
Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
by Linus Torvalds
· 6 years ago
ae5906c
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
736706b
get rid of legacy 'get_ds()' function
by Linus Torvalds
· 6 years ago
09186e5
security: mark expected switch fall-throughs and add a missing break
by Gustavo A. R. Silva
· 6 years ago
0b6cf6b
tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend()
by Roberto Sassu
· 6 years ago
879b589
tpm: retrieve digest size of unknown algorithms with PCR read
by Roberto Sassu
· 6 years ago
e7fde07
evm: Use defined constant for UUID representation
by Andy Shevchenko
· 6 years ago
fdb2410
ima: define ima_post_create_tmpfile() hook and add missing call
by Mimi Zohar
· 6 years ago
c8b3752
evm: remove set but not used variable 'xattr'
by YueHaibing
· 6 years ago
219a3e8
integrity, KEYS: add a reference to platform keyring
by Kairui Song
· 6 years ago
90462a5
audit: remove unused actx param from audit_rule_match
by Richard Guy Briggs
· 6 years ago
74673fc
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
f218a29
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
769e470
Merge tag 'kconfig-v4.21' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
by Linus Torvalds
· 6 years ago
ca79b0c
mm: convert totalram_pages and totalhigh_pages variables to atomic
by Arun KS
· 6 years ago
b71acb0
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
by Linus Torvalds
· 6 years ago
3f03bf9
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
047ce6d
Merge tag 'audit-pr-20181224' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
by Linus Torvalds
· 6 years ago
8636a1f
treewide: surround Kconfig file paths with double quotes
by Masahiro Yamada
· 6 years ago
b49d564
security: integrity: partial revert of make ima_main explicitly non-modular
by Paul Gortmaker
· 6 years ago
1a9430d
ima: cleanup the match_token policy code
by Mimi Zohar
· 6 years ago
c7f7e58
integrity: Remove references to module keyring
by Thiago Jung Bauermann
· 6 years ago
0db51ef
Merge tag 'tpmdd-next-20181217' of git://git.infradead.org/users/jjs/linux-tpmdd into next-tpm
by James Morris
· 6 years ago
5580b4a
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity
by James Morris
· 6 years ago
8bd8ea1
Merge tag 'v4.20-rc7' into next-general
by James Morris
· 6 years ago
eed9de3
ima: Use inode_is_open_for_write
by Nikolay Borisov
· 6 years ago
d7cecb6
ima: Support platform keyring for kernel appraisal
by Nayna Jain
· 6 years ago
386b49f
efi: Allow the "db" UEFI variable to be suppressed
by Josh Boyer
· 6 years ago
15ea0e1
efi: Import certificates from UEFI Secure Boot
by Josh Boyer
· 6 years ago
0bc9ae3
efi: Add an EFI signature blob parser
by Dave Howells
· 6 years ago
60740ac
integrity: Load certs to the platform keyring
by Nayna Jain
· 6 years ago
9dc92c4
integrity: Define a trusted platform keyring
by Nayna Jain
· 6 years ago
876979c
security: audit and remove any unnecessary uses of module.h
by Paul Gortmaker
· 6 years ago
3aafb1f
security: integrity: make evm_main explicitly non-modular
by Paul Gortmaker
· 6 years ago
4f83d5e
security: integrity: make ima_main explicitly non-modular
by Paul Gortmaker
· 6 years ago
060190f
ima: don't measure/appraise files on efivarfs
by Mimi Zohar
· 6 years ago
d958083
x86/ima: define arch_get_ima_policy() for x86
by Eric Richter
· 6 years ago
6191706
ima: add support for arch specific policies
by Nayna Jain
· 6 years ago
c52657d
ima: refactor ima_init_policy()
by Nayna Jain
· 6 years ago
b5ca117
ima: prevent kexec_load syscall based on runtime secureboot flag
by Nayna Jain
· 6 years ago
2a1fe21
audit: use current whenever possible
by Paul Moore
· 6 years ago
3d234b3
crypto: drop mask=CRYPTO_ALG_ASYNC from 'shash' tfm allocations
by Eric Biggers
· 6 years ago
fd35f19
integrity: support new struct public_key_signature encoding field
by Mimi Zohar
· 6 years ago
59637d5
integrity: support new struct public_key_signature encoding field
by Mimi Zohar
· 6 years ago
95adc6b
tpm: use u32 instead of int for PCR index
by Tomas Winkler
· 6 years ago
57ce66d
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
07aed2f
LSM: Record LSM name in struct lsm_info
by Kees Cook
· 6 years ago
3d6e5f6
LSM: Convert security_initcall() into DEFINE_LSM()
by Kees Cook
· 6 years ago
5b89c1b
LSM: Convert from initcall to struct lsm_info
by Kees Cook
· 6 years ago
a408e4a
ima: open a new file instance if no read permissions
by Goldwyn Rodrigues
· 6 years ago
1e4c8da
ima: fix showing large 'violations' or 'runtime_measurements_count'
by Eric Biggers
· 6 years ago
2ab5daf
security/integrity: remove unnecessary 'init_keyring' variable
by Eric Biggers
· 6 years ago
b2724d5
security/integrity: constify some read-only data
by Eric Biggers
· 6 years ago
f91e654
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
c715ebe
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
92d4a03
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
ec403d8
ima: Get rid of ima_used_chip and use ima_tpm_chip != NULL instead
by Stefan Berger
· 6 years ago
5c2a640
ima: Use tpm_default_chip() and call TPM functions with a tpm_chip
by Stefan Berger
· 6 years ago
3dd0f18
EVM: fix return value check in evm_write_xattrs()
by Wei Yongjun
· 6 years ago
6eb864c
integrity: prevent deadlock during digsig verification.
by Mikhail Kurinnoi
· 6 years ago
5feeb61
evm: Allow non-SHA1 digital signatures
by Matthew Garrett
· 6 years ago
e2861fa
evm: Don't deadlock if a crypto algorithm is unavailable
by Matthew Garrett
· 6 years ago
ac2409a
integrity: silence warning when CONFIG_SECURITYFS is not enabled
by Sudeep Holla
· 6 years ago
dba31ee
ima: Differentiate auditing policy rules from "audit" actions
by Stefan Berger
· 6 years ago
2afd020
ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set
by Stefan Berger
· 6 years ago
3d2859d
ima: Use audit_log_format() rather than audit_log_string()
by Stefan Berger
· 6 years ago
8a3bcaf
ima: Call audit_log_string() rather than logging it untrusted
by Stefan Berger
· 6 years ago
4f0496d
ima: based on policy warn about loading firmware (pre-allocated buffer)
by Mimi Zohar
· 6 years ago
c77b8cd
module: replace the existing LSM hook in init_module
by Mimi Zohar
· 6 years ago
ef96837
ima: add build time policy
by Mimi Zohar
· 6 years ago
fed2512
ima: based on policy require signed firmware (sysfs fallback)
by Mimi Zohar
· 6 years ago
16c267a
ima: based on policy require signed kexec kernel images
by Mimi Zohar
· 6 years ago
6035a27
IMA: don't propagate opened through the entire thing
by Al Viro
· 6 years ago
00d535a
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
8b5c6a3
Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
by Linus Torvalds
· 6 years ago
b5c90a7
EVM: unlock on error path in evm_read_xattrs()
by Dan Carpenter
· 6 years ago
a41d80a
EVM: prevent array underflow in evm_write_xattrs()
by Dan Carpenter
· 6 years ago
72acd64
EVM: Fix null dereference on xattr when xattr fails to allocate
by Colin Ian King
· 6 years ago
825b865
EVM: fix memory leak of temporary buffer 'temp'
by Colin Ian King
· 6 years ago
53b626f
IMA: use list_splice_tail_init_rcu() instead of its open coded variant
by Petko Manolov
· 6 years ago
b4df860
ima: use match_string() helper
by Yisheng Xie
· 6 years ago
6f0911a
ima: fix updating the ima_appraise flag
by Mimi Zohar
· 7 years ago
fd90bc5
ima: based on policy verify firmware signatures (pre-allocated buffer)
by Mimi Zohar
· 7 years ago
f1b08bb
ima: define a new policy condition based on the filesystem name
by Mimi Zohar
· 7 years ago
fa516b6
EVM: Allow runtime modification of the set of verified xattrs
by Matthew Garrett
· 7 years ago
21af766
EVM: turn evm_config_xattrnames into a list
by Matthew Garrett
· 7 years ago
0c343af
integrity: Add an integrity directory in securityfs
by Matthew Garrett
· 7 years ago
4ecd993
ima: Remove unused variable ima_initialized
by Petr Vorel
· 7 years ago
de63676
ima: Unify logging
by Petr Vorel
· 7 years ago
ffb122d
ima: Reflect correct permissions for policy
by Petr Vorel
· 7 years ago
cdfb6b3
audit: use inline function to get audit context
by Richard Guy Briggs
· 7 years ago
a3a5c96
evm: Don't update hmacs in user ns mounts
by Seth Forshee
· 7 years ago
ab60368
ima: Fallback to the builtin hash algorithm
by Petr Vorel
· 7 years ago
1c070b1
ima: Add smackfs to the default appraise/measure list
by Martin Townsend
· 7 years ago
70946c4a
evm: check for remount ro in progress before writing
by Sascha Hauer
· 7 years ago
f5e51fa
ima: Improvements in ima_appraise_measurement()
by Thiago Jung Bauermann
· 7 years ago
1775cb8
ima: Simplify ima_eventsig_init()
by Thiago Jung Bauermann
· 7 years ago
Next »