summaryrefslogtreecommitdiff
path: root/security/integrity/platform_certs
AgeCommit message (Expand)AuthorFilesLines
2023-08-29Merge tag 'tpmdd-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkk...Linus Torvalds4-5/+80
2023-08-18s390/ipl: fix virtual vs physical address confusionAlexander Gordeev1-2/+2
2023-08-17integrity: PowerVM support for loading third party code signing keysNayna Jain3-0/+30
2023-08-17integrity: check whether imputed trust is enabledNayna Jain2-3/+18
2023-08-17integrity: remove global variable from machine_keyring.cNayna Jain1-2/+2
2023-08-17integrity: ignore keys failing CA restrictions on non-UEFI platformNayna Jain1-1/+1
2023-08-17integrity: PowerVM support for loading CA keys on machine keyringNayna Jain3-0/+30
2023-06-21security/integrity: fix pointer to ESL data and its size on pseriesNayna Jain1-14/+26
2023-02-13integrity/powerpc: Support loading keys from PLPKSRussell Currey1-7/+10
2023-02-13integrity/powerpc: Improve error handling & reporting when loading certsRussell Currey1-6/+20
2023-02-12powerpc/secvar: Use u64 in secvar_operationsMichael Ellerman1-2/+2
2022-11-01efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg1-0/+1
2022-09-30efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain1-1/+1
2022-05-24Merge tag 'integrity-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-3/+44
2022-05-23certs: Factor out the blacklist hash creationMickaël Salaün1-24/+2
2022-05-17integrity: Fix sparse warnings in keyring_handlerStefan Berger1-3/+3
2022-05-15efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg2-0/+41
2022-03-08integrity: Only use machine keyring when uefi_check_trust_mok_keys is trueEric Snowberg2-1/+17
2022-03-08integrity: Trust MOK keys if MokListTrustedRT foundEric Snowberg1-0/+19
2022-03-08integrity: add new keyring handler for mok keysEric Snowberg3-3/+23
2022-03-08integrity: Introduce a Linux keyring called machineEric Snowberg1-0/+42
2022-03-08integrity: Fix warning about missing prototypesEric Snowberg1-0/+1
2021-12-24integrity: Do not load MOK and MOKx when secure boot be disabledLee, Chun-Yi1-0/+5
2021-08-27efi: Don't use knowledge about efi_guid_t internalsAndy Shevchenko1-1/+1
2021-03-11integrity: Load mokx variables into the blacklist keyringEric Snowberg1-2/+18
2021-03-11certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg1-0/+11
2020-09-16integrity: Load certs from the EFI MOK config tableLenny Szubowicz1-0/+22
2020-09-16integrity: Move import of MokListRT certs to a separate routineLenny Szubowicz1-19/+44
2020-02-26Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi...Ingo Molnar1-1/+1
2020-02-23integrity: Check properly whether EFI GetVariable() is availableArd Biesheuvel1-1/+1
2020-02-18efi: Only print errors about failing to get certs if EFI vars are foundJavier Martinez Canillas1-14/+26
2019-11-29x86/efi: remove unused variablesYueHaibing1-5/+0
2019-11-12powerpc: Load firmware trusted keys/hashes into kernel keyringNayna Jain1-0/+96
2019-11-12x86/efi: move common keyring handler functions to new fileNayna Jain3-66/+113
2019-07-11Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-10/+4
2019-06-28keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells1-4/+10
2019-04-26s390/ipl: read IPL report at early bootMartin Schwidefsky1-0/+36
2018-12-13efi: Allow the "db" UEFI variable to be suppressedJosh Boyer1-10/+35
2018-12-13efi: Import certificates from UEFI Secure BootJosh Boyer1-0/+169
2018-12-13efi: Add an EFI signature blob parserDave Howells1-0/+108
2018-12-13integrity: Load certs to the platform keyringNayna Jain1-0/+23
2018-12-13integrity: Define a trusted platform keyringNayna Jain1-0/+35