summaryrefslogtreecommitdiffstats
path: root/security/integrity/evm
Commit message (Expand)AuthorAgeFilesLines
* EVM: fix return value check in evm_write_xattrs()Wei Yongjun2018-07-221-2/+2
* evm: Allow non-SHA1 digital signaturesMatthew Garrett2018-07-184-31/+46
* evm: Don't deadlock if a crypto algorithm is unavailableMatthew Garrett2018-07-181-1/+2
* Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2018-06-075-42/+271
|\
| * EVM: unlock on error path in evm_read_xattrs()Dan Carpenter2018-06-011-1/+3
| * EVM: prevent array underflow in evm_write_xattrs()Dan Carpenter2018-05-311-1/+1
| * EVM: Fix null dereference on xattr when xattr fails to allocateColin Ian King2018-05-311-2/+4
| * EVM: fix memory leak of temporary buffer 'temp'Colin Ian King2018-05-311-0/+2
| * EVM: Allow runtime modification of the set of verified xattrsMatthew Garrett2018-05-184-4/+188
| * EVM: turn evm_config_xattrnames into a listMatthew Garrett2018-05-183-39/+57
| * integrity: Add an integrity directory in securityfsMatthew Garrett2018-05-171-3/+24
* | evm: Don't update hmacs in user ns mountsSeth Forshee2018-05-031-1/+2
|/
* evm: check for remount ro in progress before writingSascha Hauer2018-03-251-2/+6
* evm: Constify *integrity_status_msg[]Hernán Gonzalez2018-03-231-1/+1
* evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.cHernán Gonzalez2018-03-233-4/+3
* EVM: Add support for portable signature formatMatthew Garrett2017-12-113-20/+86
* EVM: Allow userland to permit modification of EVM-protected metadataMatthew Garrett2017-12-113-12/+53
* EVM: Only complain about a missing HMAC key onceMatthew Garrett2017-11-081-1/+1
* EVM: Allow userspace to signal an RSA key has been loadedMatthew Garrett2017-11-082-12/+20
* EVM: Include security.apparmor in EVM measurementsMatthew Garrett2017-11-081-0/+3
* fs: switch ->s_uuid to uuid_tChristoph Hellwig2017-06-051-1/+1
* sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sche...Ingo Molnar2017-03-021-0/+2
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2016-12-141-2/+10
|\
| * Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"Eric W. Biederman2016-12-021-2/+10
* | security/integrity: Harden against malformed xattrsSeth Forshee2016-11-131-0/+4
|/
* xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher2016-10-072-5/+6
* evm: Translate user/group ids relative to s_user_ns when computing HMACSeth Forshee2016-07-051-2/+2
* ->getxattr(): pass dentry and inode as separate argumentsAl Viro2016-04-111-1/+1
* don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro2016-04-101-2/+2
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2016-02-121-1/+2
* evm: EVM_LOAD_X509 depends on EVMArnd Bergmann2015-12-151-1/+1
* evm: reset EVM status when file attributes changeDmitry Kasatkin2015-12-151-0/+13
* evm: provide a function to set the EVM key from the kernelDmitry Kasatkin2015-12-152-14/+46
* evm: enable EVM when X509 certificate is loadedDmitry Kasatkin2015-12-154-3/+14
* evm: load an x509 certificate from the kernelDmitry Kasatkin2015-12-152-0/+24
* integrity: define '.evm' as a builtin 'trusted' keyringDmitry Kasatkin2015-11-231-3/+5
* KEYS: Merge the type-specific data with the payload dataDavid Howells2015-10-211-1/+1
* evm: fix potential race when removing xattrsDmitry Kasatkin2015-05-211-4/+3
* evm: labeling pseudo filesystems exceptionMimi Zohar2015-05-211-0/+11
* VFS: security/: d_backing_inode() annotationsDavid Howells2015-04-152-11/+11
* kconfig: use bool instead of boolean for type definition attributesChristoph Jaeger2015-01-071-1/+1
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2014-12-141-3/+8
|\
| * evm: skip replacing EVM signature with HMAC on read-only filesystemDmitry Kasatkin2014-10-071-3/+8
* | evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin2014-10-281-3/+6
|/
* integrity: base integrity subsystem kconfig options on integrityDmitry Kasatkin2014-09-091-8/+0
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-09-091-0/+7
* evm: prevent passing integrity check if xattr read failsDmitry Kasatkin2014-09-081-3/+4
* evm: fix checkpatch warningsDmitry Kasatkin2014-09-021-3/+0
* evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-121-2/+10
* evm: provide option to protect additional SMACK xattrsDmitry Kasatkin2014-06-122-0/+22
OpenPOWER on IntegriCloud