summaryrefslogtreecommitdiff
path: root/security/integrity/evm
AgeCommit message (Expand)Author
2018-05-03evm: Don't update hmacs in user ns mountsSeth Forshee
2018-03-25evm: check for remount ro in progress before writingSascha Hauer
2018-03-23evm: Constify *integrity_status_msg[]Hernán Gonzalez
2018-03-23evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.cHernán Gonzalez
2017-12-11EVM: Add support for portable signature formatMatthew Garrett
2017-12-11EVM: Allow userland to permit modification of EVM-protected metadataMatthew Garrett
2017-11-08EVM: Only complain about a missing HMAC key onceMatthew Garrett
2017-11-08EVM: Allow userspace to signal an RSA key has been loadedMatthew Garrett
2017-11-08EVM: Include security.apparmor in EVM measurementsMatthew Garrett
2017-06-05fs: switch ->s_uuid to uuid_tChristoph Hellwig
2017-03-02sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sche...Ingo Molnar
2016-12-14Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2016-12-02Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"Eric W. Biederman
2016-11-13security/integrity: Harden against malformed xattrsSeth Forshee
2016-10-07xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher
2016-07-05evm: Translate user/group ids relative to s_user_ns when computing HMACSeth Forshee
2016-04-11->getxattr(): pass dentry and inode as separate argumentsAl Viro
2016-04-10don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro
2016-02-12EVM: Use crypto_memneq() for digest comparisonsRyan Ware
2015-12-15evm: EVM_LOAD_X509 depends on EVMArnd Bergmann
2015-12-15evm: reset EVM status when file attributes changeDmitry Kasatkin
2015-12-15evm: provide a function to set the EVM key from the kernelDmitry Kasatkin
2015-12-15evm: enable EVM when X509 certificate is loadedDmitry Kasatkin
2015-12-15evm: load an x509 certificate from the kernelDmitry Kasatkin
2015-11-23integrity: define '.evm' as a builtin 'trusted' keyringDmitry Kasatkin
2015-10-21KEYS: Merge the type-specific data with the payload dataDavid Howells
2015-05-21evm: fix potential race when removing xattrsDmitry Kasatkin
2015-05-21evm: labeling pseudo filesystems exceptionMimi Zohar
2015-04-15VFS: security/: d_backing_inode() annotationsDavid Howells
2015-01-07kconfig: use bool instead of boolean for type definition attributesChristoph Jaeger
2014-12-14Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2014-10-28evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin
2014-10-07evm: skip replacing EVM signature with HMAC on read-only filesystemDmitry Kasatkin
2014-09-09integrity: base integrity subsystem kconfig options on integrityDmitry Kasatkin
2014-09-09evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin
2014-09-08evm: prevent passing integrity check if xattr read failsDmitry Kasatkin
2014-09-02evm: fix checkpatch warningsDmitry Kasatkin
2014-06-12evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar
2014-06-12evm: provide option to protect additional SMACK xattrsDmitry Kasatkin
2014-06-12evm: replace HMAC version with attribute maskDmitry Kasatkin
2014-04-12Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2014-04-01get rid of pointless checks for NULL ->i_opAl Viro
2014-03-07evm: enable key retention service automaticallyDmitry Kasatkin
2014-03-07evm: EVM does not use MD5Dmitry Kasatkin
2014-03-07integrity: fix checkpatch errorsDmitry Kasatkin
2014-03-07security: integrity: Use a more current logging styleJoe Perches
2013-10-25ima: pass full xattr with the signatureDmitry Kasatkin
2013-10-25ima: fix script messagesDmitry Kasatkin
2013-07-25xattr: Constify ->name member of "struct xattr".Tetsuo Handa
2013-06-20evm: audit integrity metadata failuresMimi Zohar