summaryrefslogtreecommitdiff
path: root/security/integrity/ima
AgeCommit message (Expand)AuthorFilesLines
2022-07-29lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg1-0/+4
2022-07-21ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie1-0/+1
2022-07-21ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu1-1/+2
2022-06-09ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua1-8/+6
2022-02-16ima: Do not print policy rule with inactive LSM labelsStefan Berger1-0/+8
2022-02-16ima: Allow template selection with ima_template[_fmt]= after ima_hash=Roberto Sassu1-3/+7
2022-02-16ima: Remove ima_policy file before directoryStefan Berger1-1/+1
2021-09-15IMA: remove the dependency on CRYPTO_MD5THOBY Simon1-1/+0
2021-09-15IMA: remove -Wmissing-prototypes warningAustin Kim1-1/+1
2021-05-14ima: Fix the error code for restoring the PCR valueLi Huafei1-2/+2
2021-03-04certs: Fix blacklist flag type confusionDavid Howells1-3/+2
2021-03-04ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian1-0/+2
2021-03-04ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian1-0/+1
2020-12-30ima: Don't modify file descriptor mode on the flyRoberto Sassu1-15/+5
2020-10-30ima: Replace zero-length array with flexible-array memberGustavo A. R. Silva1-1/+1
2020-10-16Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds5-64/+143
2020-10-05fs/kernel_file_read: Add "offset" arg for partial readsKees Cook1-1/+2
2020-10-05IMA: Add support for file reads without contentsScott Branden1-6/+16
2020-10-05LSM: Add "contents" flag to kernel_read_file hookKees Cook1-1/+9
2020-10-05firmware_loader: Use security_post_load_data()Kees Cook1-10/+10
2020-10-05LSM: Introduce kernel_post_load_data() hookKees Cook1-1/+23
2020-10-05fs/kernel_read_file: Add file_size output argumentKees Cook1-1/+1
2020-10-05fs/kernel_read_file: Switch buffer size arg to size_tKees Cook1-1/+1
2020-10-05fs/kernel_read_file: Remove redundant size argumentKees Cook1-2/+4
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden3-0/+3
2020-10-05fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook2-5/+3
2020-09-17ima: Fix NULL pointer dereference in ima_file_hashKP Singh1-0/+10
2020-09-15ima: Remove semicolon at the end of ima_get_binary_runtime_size()Roberto Sassu1-1/+1
2020-09-15ima: Don't ignore errors from crypto_shash_update()Roberto Sassu1-0/+2
2020-09-15ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar1-5/+4
2020-09-10ima: limit secure boot feedback scope for appraiseBruno Meneguele1-9/+16
2020-09-09integrity: invalid kernel parameters feedbackBruno Meneguele3-4/+13
2020-09-09ima: add check for enforced appraise optionBruno Meneguele1-0/+2
2020-09-01ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks1-2/+4
2020-09-01ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks1-45/+93
2020-08-24treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva3-7/+7
2020-08-12Merge tag 'for-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris...Linus Torvalds4-4/+4
2020-08-06Replace HTTP links with HTTPS ones: securityAlexander A. Klimov4-4/+4
2020-07-21ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtimeBruno Meneguele2-1/+7
2020-07-21ima: AppArmor satisfies the audit rule requirementsTyler Hicks1-1/+1
2020-07-21ima: Rename internal filter rule functionsTyler Hicks2-25/+21
2020-07-20ima: Support additional conditionals in the KEXEC_CMDLINE hook functionTyler Hicks7-22/+28
2020-07-20ima: Use the common function to detect LSM conditionals in a ruleTyler Hicks1-9/+2
2020-07-20ima: Move comprehensive rule validation checks out of the token parserTyler Hicks3-46/+37
2020-07-20ima: Use correct type for the args_p member of ima_rule_entry.lsm elementsTyler Hicks1-9/+9
2020-07-20ima: Shallow copy the args_p member of ima_rule_entry.lsm elementsTyler Hicks1-10/+8
2020-07-20ima: Fail rule parsing when appraise_flag=blacklist is unsupportableTyler Hicks1-1/+14
2020-07-17ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid condTyler Hicks1-0/+7
2020-07-17ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invali...Tyler Hicks1-0/+21
2020-07-17ima: Fail rule parsing when buffer hook functions have an invalid actionTyler Hicks1-2/+38