summaryrefslogtreecommitdiffstats
path: root/security/integrity/evm
Commit message (Expand)AuthorAgeFilesLines
* evm: Translate user/group ids relative to s_user_ns when computing HMACSeth Forshee2016-07-051-2/+2
* ->getxattr(): pass dentry and inode as separate argumentsAl Viro2016-04-111-1/+1
* don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro2016-04-101-2/+2
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2016-02-121-1/+2
* evm: EVM_LOAD_X509 depends on EVMArnd Bergmann2015-12-151-1/+1
* evm: reset EVM status when file attributes changeDmitry Kasatkin2015-12-151-0/+13
* evm: provide a function to set the EVM key from the kernelDmitry Kasatkin2015-12-152-14/+46
* evm: enable EVM when X509 certificate is loadedDmitry Kasatkin2015-12-154-3/+14
* evm: load an x509 certificate from the kernelDmitry Kasatkin2015-12-152-0/+24
* integrity: define '.evm' as a builtin 'trusted' keyringDmitry Kasatkin2015-11-231-3/+5
* KEYS: Merge the type-specific data with the payload dataDavid Howells2015-10-211-1/+1
* evm: fix potential race when removing xattrsDmitry Kasatkin2015-05-211-4/+3
* evm: labeling pseudo filesystems exceptionMimi Zohar2015-05-211-0/+11
* VFS: security/: d_backing_inode() annotationsDavid Howells2015-04-152-11/+11
* kconfig: use bool instead of boolean for type definition attributesChristoph Jaeger2015-01-071-1/+1
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2014-12-141-3/+8
|\
| * evm: skip replacing EVM signature with HMAC on read-only filesystemDmitry Kasatkin2014-10-071-3/+8
* | evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin2014-10-281-3/+6
|/
* integrity: base integrity subsystem kconfig options on integrityDmitry Kasatkin2014-09-091-8/+0
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-09-091-0/+7
* evm: prevent passing integrity check if xattr read failsDmitry Kasatkin2014-09-081-3/+4
* evm: fix checkpatch warningsDmitry Kasatkin2014-09-021-3/+0
* evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-121-2/+10
* evm: provide option to protect additional SMACK xattrsDmitry Kasatkin2014-06-122-0/+22
* evm: replace HMAC version with attribute maskDmitry Kasatkin2014-06-124-11/+33
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2014-04-122-2/+2
|\
| * get rid of pointless checks for NULL ->i_opAl Viro2014-04-012-2/+2
* | evm: enable key retention service automaticallyDmitry Kasatkin2014-03-071-2/+3
* | evm: EVM does not use MD5Dmitry Kasatkin2014-03-071-1/+0
* | integrity: fix checkpatch errorsDmitry Kasatkin2014-03-072-16/+16
* | security: integrity: Use a more current logging styleJoe Perches2014-03-073-5/+11
|/
* ima: pass full xattr with the signatureDmitry Kasatkin2013-10-251-2/+2
* ima: fix script messagesDmitry Kasatkin2013-10-251-1/+2
* xattr: Constify ->name member of "struct xattr".Tetsuo Handa2013-07-251-1/+1
* evm: audit integrity metadata failuresMimi Zohar2013-06-201-1/+14
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2013-02-215-16/+18
|\
| * evm: add file system uuid to EVM hmacDmitry Kasatkin2013-02-064-0/+18
| * evm: remove unused cleanup functionsDmitry Kasatkin2013-01-163-16/+0
* | evm: checking if removexattr is not a NULLDmitry Kasatkin2013-01-221-2/+2
|/
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2012-10-021-0/+3
|\
| * ima: integrity appraisal extensionMimi Zohar2012-09-071-0/+3
* | userns: Convert EVM to deal with kuids and kgids in it's hmac computationEric W. Biederman2012-09-211-2/+2
|/
* Merge branch 'next' into for-linusJames Morris2012-01-093-36/+146
|\
| * evm: prevent racing during tfm allocationDmitry Kasatkin2011-12-081-3/+11
| * evm: key must be set once during initializationDmitry Kasatkin2011-12-081-7/+8
| * evm: digital signature verification supportDmitry Kasatkin2011-11-093-30/+142
* | evm: prevent racing during tfm allocationDmitry Kasatkin2011-12-201-0/+9
* | evm: key must be set once during initializationDmitry Kasatkin2011-12-201-4/+6
|/
* evm: permit mode bits to be updatedMimi Zohar2011-09-141-17/+13
* evm: posix acls modify i_modeMimi Zohar2011-09-143-5/+46
OpenPOWER on IntegriCloud