summaryrefslogtreecommitdiff
path: root/security/integrity
AgeCommit message (Expand)AuthorFilesLines
2023-03-11ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu1-2/+5
2023-01-14ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu1-1/+4
2023-01-14efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg1-0/+1
2023-01-14ima: Simplify ima_lsm_copy_ruleGUO Zihua1-7/+3
2023-01-14ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng1-2/+2
2023-01-14integrity: Fix memory leakage in keyring allocation error pathGUO Zihua1-1/+5
2023-01-14ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua1-9/+32
2023-01-14ima: Fix fall-through warnings for ClangGustavo A. R. Silva2-0/+3
2022-10-15efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain1-1/+1
2022-07-29lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg1-0/+4
2022-07-21ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie1-0/+1
2022-07-21ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu1-1/+2
2022-07-21Revert "evm: Fix memleak in init_desc"Xiu Jianfeng1-5/+2
2022-06-09ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua1-8/+6
2022-06-09efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg2-0/+41
2022-04-08EVM: fix the evm= __setup handler return valueRandy Dunlap1-1/+1
2022-02-16ima: Do not print policy rule with inactive LSM labelsStefan Berger1-0/+8
2022-02-16ima: Allow template selection with ima_template[_fmt]= after ima_hash=Roberto Sassu1-3/+7
2022-02-16ima: Remove ima_policy file before directoryStefan Berger1-1/+1
2022-02-16integrity: check the return value of audit_log_start()Xiaoke Wang1-0/+2
2021-11-18evm: mark evm_fixmode as __ro_after_initAustin Kim1-1/+1
2021-09-15IMA: remove the dependency on CRYPTO_MD5THOBY Simon1-1/+0
2021-09-15IMA: remove -Wmissing-prototypes warningAustin Kim1-1/+1
2021-07-14evm: fix writing <securityfs>/evm overflowMimi Zohar1-2/+3
2021-07-14evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loadedRoberto Sassu1-4/+4
2021-07-14evm: Execute evm_inode_init_security() only when an HMAC key is loadedRoberto Sassu1-2/+3
2021-06-30integrity: Load mokx variables into the blacklist keyringEric Snowberg1-2/+18
2021-06-30certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg1-0/+11
2021-05-14ima: Fix the error code for restoring the PCR valueLi Huafei1-2/+2
2021-03-30integrity: double check iint_cache was initializedMimi Zohar1-0/+8
2021-03-04certs: Fix blacklist flag type confusionDavid Howells1-3/+2
2021-03-04ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian1-0/+2
2021-03-04ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian1-0/+1
2021-03-04evm: Fix memleak in init_descDinghao Liu1-2/+5
2020-12-30ima: Don't modify file descriptor mode on the flyRoberto Sassu1-15/+5
2020-10-30ima: Replace zero-length array with flexible-array memberGustavo A. R. Silva1-1/+1
2020-10-16Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds8-67/+161
2020-10-15Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds4-23/+69
2020-10-13Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-3/+11
2020-10-12Merge tag 'efi-core-2020-10-12' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-19/+66
2020-10-05fs/kernel_file_read: Add "offset" arg for partial readsKees Cook2-2/+3
2020-10-05IMA: Add support for file reads without contentsScott Branden1-6/+16
2020-10-05LSM: Add "contents" flag to kernel_read_file hookKees Cook1-1/+9
2020-10-05firmware_loader: Use security_post_load_data()Kees Cook1-10/+10
2020-10-05LSM: Introduce kernel_post_load_data() hookKees Cook1-1/+23
2020-10-05fs/kernel_read_file: Add file_size output argumentKees Cook2-2/+2
2020-10-05fs/kernel_read_file: Switch buffer size arg to size_tKees Cook2-2/+2
2020-10-05fs/kernel_read_file: Remove redundant size argumentKees Cook2-4/+7
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden4-0/+4
2020-10-05fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook3-6/+4