projects
/
firefly-linux-kernel-4.4.55.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
ima: added ima_policy_flag variable
2014-09-17
Roberto Sassu
ima: added ima_policy_flag variable
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-17
Roberto Sassu
ima: return an error code from ima_add_boot_aggregate()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-17
Dmitry Kasatkin
ima: provide 'ima_appraise=log' kernel option
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-17
Dmitry Kasatkin
ima: move keyring initialization to ima_init()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
integrity: make integrity files as 'integrity' module
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
integrity: base integrity subsystem kconfig options...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
integrity: move asymmetric keys config option
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: initialize only required template
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: remove usage of filename parameter
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: remove unnecessary appraisal test
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: add missing '__init' keywords
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: remove unnecessary extra variable
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: simplify conditional statement to improve performance
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
integrity: remove declaration of non-existing functions
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
integrity: prevent flooding with 'Request for unknown...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
ima: pass 'opened' flag to identify newly created files
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-09
Dmitry Kasatkin
evm: properly handle INTEGRITY_NOXATTRS EVM status
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-08
Dmitry Kasatkin
ima: provide flag to identify new empty files
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-08
Dmitry Kasatkin
evm: prevent passing integrity check if xattr read...
commit
|
commitdiff
|
tree
2014-09-02
Dmitry Kasatkin
evm: fix checkpatch warnings
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-02
Dmitry Kasatkin
ima: fix fallback to use new_sync_read()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-02
Dmitry Kasatkin
ima: prevent buffer overflow in ima_alloc_tfm()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-09-02
Mimi Zohar
ima: fix ima_alloc_atfm()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Mimi Zohar
ima: define '.ima' as a builtin 'trusted' keyring
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
KEYS: validate certificate trust only with builtin...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
KEYS: validate certificate trust only with selected key
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
KEYS: make partial key id matching as a dedicated function
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Mimi Zohar
KEYS: verify a certificate is signed by a 'trusted...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Mimi Zohar
KEYS: special dot prefixed keyring name bug fix
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
ima: provide double buffering for hash calculation
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
ima: introduce multi-page collect buffers
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
ima: use ahash API for file hash calculation
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Richard Guy Briggs
audit: fix dangling keywords in integrity ima message...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
ima: delay template descriptor lookup until use
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-07-17
Dmitry Kasatkin
ima: remove unnecessary i_mutex locking from ima_rdwr_violat...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Dmitry Kasatkin
ima: introduce ima_kernel_read()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Mimi Zohar
evm: prohibit userspace writing 'security.evm' HMAC...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Dmitry Kasatkin
ima: check inode integrity cache in violation check
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Dmitry Kasatkin
ima: prevent unnecessary policy checking
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Dmitry Kasatkin
evm: provide option to protect additional SMACK xattrs
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Dmitry Kasatkin
evm: replace HMAC version with attribute mask
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-06-12
Mimi Zohar
ima: prevent new digsig xattr from being replaced
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Dmitry Kasatkin
evm: enable key retention service automatically
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Dmitry Kasatkin
ima: skip memory allocation for empty files
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Dmitry Kasatkin
evm: EVM does not use MD5
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Dmitry Kasatkin
ima: return d_name.name if d_path fails
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Dmitry Kasatkin
integrity: fix checkpatch errors
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Dmitry Kasatkin
ima: fix erroneous removal of security.ima xattr
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Joe Perches
security: integrity: Use a more current logging style
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Mimi Zohar
MAINTAINERS: email updates and other misc. changes
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Roberto Sassu
ima: reduce memory usage when a template containing...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Roberto Sassu
ima: restore the original behavior for sending data...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Tetsuo Handa
Integrity: Pass commname via get_task_comm()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Mimi Zohar
fs: move i_readcount
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-07
Mimi Zohar
ima: use static const char array definitions
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-03-04
Libo Chen
ima: new helper: file_inode(file)
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-01-03
Roberto Sassu
ima: remove unneeded size_limit argument from ima_eventdiges...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-01-03
Mimi Zohar
ima: update IMA-templates.txt documentation
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-01-03
Roberto Sassu
ima: pass HASH_ALGO__LAST as hash algo in ima_eventdigest_init()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2014-01-03
Roberto Sassu
ima: change the default hash algorithm to SHA1 in ima_eventd...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-12-03
Roberto Sassu
ima: properly free ima_template_entry structures
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-12-03
Christoph Paasch
ima: Do not free 'entry' before it is initialized
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-11-25
Roberto Sassu
ima: make a copy of template_fmt in template_desc_init_fields()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-11-25
Roberto Sassu
ima: do not send field length to userspace for digest...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-11-25
Roberto Sassu
ima: do not include field length in template digest...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-11-01
Mimi Zohar
ima: define '_ima' as a builtin 'trusted' keyring
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-11-01
Mimi Zohar
ima: extend the measurement list to include the file...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-27
Dmitry Kasatkin
ima: provide hash algo info in the xattr
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-27
Mimi Zohar
ima: enable support for larger default filedata hash...
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-10-27
Roberto Sassu
ima: define kernel parameter 'ima_template=' to change...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-27
Mimi Zohar
ima: add Kconfig default measurement list template
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-10-27
Roberto Sassu
ima: defer determining the appraisal hash algorithm...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-27
Mimi Zohar
ima: add audit log support for larger hashes
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: switch to new template management mechanism
- unnecessary to use strncmp() (
Mimi Zohar
)
proposed by
Mimi Zohar
)
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: define new template ima-ng and template fields...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: define template fields library and new helpers
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: new templates management mechanism
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: define new function ima_alloc_init_template()...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: pass the filename argument up to ima_add_template_entry()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Roberto Sassu
ima: pass the file descriptor to ima_add_violation()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: ima_calc_boot_agregate must use SHA1
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: support arbitrary hash algorithms in ima_calc_buffer_hash
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: provide dedicated hash algo allocation function
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Mimi Zohar
ima: differentiate between template hash and file data...
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: use dynamically allocated hash storage
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: pass full xattr with the signature
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: read and use signature hash algorithm
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: provide support for arbitrary hash algorithms
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
keys: change asymmetric keys to use common hash definitions
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
crypto: provide single place for hash algo information
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Mimi Zohar
Revert "ima: policy for RAMFS"
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-10-25
Dmitry Kasatkin
ima: fix script messages
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-06-20
Mimi Zohar
evm: audit integrity metadata failures
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-06-20
Mimi Zohar
integrity: move integrity_audit_msg()
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-06-20
Mimi Zohar
evm: calculate HMAC after initializing posix acl on...
Signed-off-by:
Mimi Zohar
<zohar@us.ibm.com>
commit
|
commitdiff
|
tree
2013-06-20
Mimi Zohar
maintainers: add Dmitry Kasatkin
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-02-07
Dmitry Kasatkin
ima: digital signature verification using asymmetric...
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-02-06
Dmitry Kasatkin
ima: rename hash calculation functions
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-02-06
Dmitry Kasatkin
ima: use new crypto_shash API instead of old crypto_hash
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
2013-02-06
Dmitry Kasatkin
ima: add policy support for file system uuid
Signed-off-by:
Mimi Zohar
<zohar@linux.vnet.ibm.com>
commit
|
commitdiff
|
tree
next