- d903c3b ima: Allow template selection with ima_template[_fmt]= after ima_hash= by Roberto Sassu · 3 years, 1 month ago
- 9021b24 ima: Remove ima_policy file before directory by Stefan Berger · 3 years, 1 month ago
- 340f61f integrity: check the return value of audit_log_start() by Xiaoke Wang · 3 years, 2 months ago
- 8125c6e evm: mark evm_fixmode as __ro_after_init by Austin Kim · 3 years, 4 months ago
- a9c5853 IMA: remove -Wmissing-prototypes warning by Austin Kim · 3 years, 8 months ago
- ad26df1 certs: Fix blacklist flag type confusion by David Howells · 4 years, 3 months ago
- 005da2a ima: Free IMA measurement buffer after kexec syscall by Lakshmi Ramasubramanian · 4 years, 1 month ago
- 5db2c9e ima: Free IMA measurement buffer on error by Lakshmi Ramasubramanian · 4 years, 1 month ago
- 07c67ec ima: Don't modify file descriptor mode on the fly by Roberto Sassu · 4 years, 3 months ago
- d0f7036 ima: Don't ignore errors from crypto_shash_update() by Roberto Sassu · 4 years, 6 months ago
- 8464622 evm: Fix possible memory leak in evm_calc_hmac_or_hash() by Roberto Sassu · 4 years, 11 months ago
- 1ff06c6 ima: Directly assign the ima_default_policy pointer to ima_rules by Roberto Sassu · 4 years, 9 months ago
- 340b97c ima: Fix ima digest hash table key calculation by Krzysztof Struczynski · 4 years, 10 months ago
- fa63cb9 ima: Fix return value of ima_write_policy() by Roberto Sassu · 4 years, 10 months ago
- 9bf1124 evm: Check also if *tfm is an error pointer in init_desc() by Roberto Sassu · 4 years, 10 months ago
- 7bc1380 ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() by Roberto Sassu · 4 years, 10 months ago
- 27551db ima: always return negative code for error by Sascha Hauer · 6 years ago
- 8eb3701 ima: show rules with IMA_INMASK correctly by Roberto Sassu · 6 years ago
- 16be27a ima: open a new file instance if no read permissions by Goldwyn Rodrigues · 6 years ago
- d467320 ima: re-initialize iint->atomic_flags by Mimi Zohar · 7 years ago
- 281c07f ima: re-introduce own integrity cache lock by Dmitry Kasatkin · 7 years ago
- e099863 EVM: Add support for portable signature format by Matthew Garrett · 7 years ago
- de72a0f ima: always measure and audit files in policy by Mimi Zohar · 8 years ago
- 4c6fda1 ima: fix showing large 'violations' or 'runtime_measurements_count' by Eric Biggers · 6 years ago
- c818695 evm: Don't deadlock if a crypto algorithm is unavailable by Matthew Garrett · 7 years ago
- cffbdb7 ima: based on policy verify firmware signatures (pre-allocated buffer) by Mimi Zohar · 7 years ago
- cd2399b ima: Fallback to the builtin hash algorithm by Petr Vorel · 7 years ago
- bc72e4f ima: Fix Kconfig to select TPM 2.0 CRB interface by Jiandi An · 7 years ago
- 09897fc integrity/security: fix digsig.c build error with header file by Randy Dunlap · 7 years ago
- fd6170b ima: relax requiring a file signature for new files with zero length by Mimi Zohar · 7 years ago
- 516868c ima/policy: fix parsing of fsuuid by Mike Rapoport · 7 years ago
- 7c50347 ima: fix hash algorithm initialization by Boshi Wang · 7 years ago
- 87eb84b ima: do not update security.ima if appraisal status is not INTEGRITY_PASS by Roberto Sassu · 7 years ago
- b244131 License cleanup: add SPDX GPL-2.0 license identifier to files with no license by Greg Kroah-Hartman · 7 years ago
- e24dd9e Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
- 915d9d2 ima: Log the same audit cause whenever a file has no signature by Thiago Jung Bauermann · 8 years ago
- 2663218 ima: Simplify policy_func_show. by Thiago Jung Bauermann · 8 years ago
- bb543e3 integrity: Small code improvements by Thiago Jung Bauermann · 8 years ago
- e4586c79 ima: fix get_binary_runtime_size() by Roberto Sassu · 8 years ago
- 28a8dc4 ima: use ima_parse_buf() to parse template data by Roberto Sassu · 8 years ago
- 47fdee6 ima: use ima_parse_buf() to parse measurements headers by Roberto Sassu · 8 years ago
- b17fd9e ima: introduce ima_parse_buf() by Roberto Sassu · 8 years ago
- 82e3bb4 ima: Add cgroups2 to the defaults list by Laura Abbott · 8 years ago
- b4e2803 ima: use memdup_user_nul by Geliang Tang · 8 years ago
- 5d659f2 ima: fix up #endif comments by Tycho Andersen · 8 years ago
- 38d1926 IMA: Correct Kconfig dependencies for hash selection by Ben Hutchings · 8 years ago
- 6f6723e ima: define is_ima_appraise_enabled() by Mimi Zohar · 8 years ago
- e1f5e01 ima: define Kconfig IMA_APPRAISE_BOOTPARAM option by Mimi Zohar · 8 years ago
- 503ceae ima: define a set of appraisal rules requiring file signatures by Mimi Zohar · 8 years ago
- 33ce954 ima: extend the "ima_policy" boot command line to support multiple policies by Mimi Zohar · 8 years ago
- 8578709 fs: switch ->s_uuid to uuid_t by Christoph Hellwig · 8 years ago
- 787d8c5 ima/policy: switch to use uuid_t by Christoph Hellwig · 8 years ago
- 1dd771e block: remove blk_part_pack_uuid by Christoph Hellwig · 8 years ago
- f65cc10 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next by James Morris · 8 years ago
- 2b6aa41 KEYS: Use structure to capture key restriction function and data by Mat Martineau · 9 years ago
- 3dd0c8d ima: provide ">" and "<" operators for fowner/uid/euid rules. by Mikhail Kurinnoi · 8 years ago
- 1ac202e ima: accept previously set IMA_NEW_FILE by Daniel Glöckner · 8 years ago
- bad4417 integrity: mark default IMA rules as __ro_after_init by James Morris · 8 years ago
- 50d3439 sched/headers: Prepare to remove the <linux/magic.h> include from <linux/sched/task_stack.h> by Ingo Molnar · 8 years ago
- 20f482a ima: allow to check MAY_APPEND by Lans Zhang · 8 years ago
- bc15ed6 ima: fix ima_d_path() possible race with rename by Mimi Zohar · 8 years ago
- 98e1d55d ima: platform-independent hash value by Andreas Steffen · 8 years ago
- d68a6fe ima: define a canonical binary_runtime_measurements list format by Mimi Zohar · 8 years ago
- c7d0936 ima: support restoring multiple template formats by Mimi Zohar · 8 years ago
- 3f23d62 ima: store the builtin/custom template definitions in a list by Mimi Zohar · 8 years ago
- 7b8589c ima: on soft reboot, save the measurement list by Mimi Zohar · 8 years ago
- d158847 ima: maintain memory size needed for serializing the measurement list by Mimi Zohar · 8 years ago
- dcfc569 ima: permit duplicate measurement list entries by Mimi Zohar · 8 years ago
- 94c3aac ima: on soft reboot, restore the measurement list by Mimi Zohar · 8 years ago
- 412ac77a Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 8 years ago
- 19339c2 Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC" by Eric W. Biederman · 8 years ago
- b4bfec7 security/integrity: Harden against malformed xattrs by Seth Forshee · 9 years ago
- 064be15 ima: include the reason for TPM-bypass mode by Mimi Zohar · 8 years ago
- f5acb3d Revert "ima: limit file hash setting by user to fix and log modes" by Mimi Zohar · 8 years ago
- 9a11a18 ima: fix memory leak in ima_release_policy by Eric Richter · 8 years ago
- 97d2116 Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
- 5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
- e71b9df ima: use file_dentry() by Miklos Szeredi · 8 years ago
- 7a1e8b8 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
- 0b3c976 evm: Translate user/group ids relative to s_user_ns when computing HMAC by Seth Forshee · 10 years ago
- 544e1ce ima: extend the measurement entry specific pcr by Eric Richter · 9 years ago
- a422638 ima: change integrity cache to store measured pcr by Eric Richter · 9 years ago
- 67696f6 ima: redefine duplicate template entries by Eric Richter · 9 years ago
- 5f6f027 ima: change ima_measurements_show() to display the entry specific pcr by Eric Richter · 9 years ago
- 14b1da8 ima: include pcr for each measurement log entry by Eric Richter · 9 years ago
- 725de7f ima: extend ima_get_action() to return the policy pcr by Eric Richter · 9 years ago
- 0260643 ima: add policy support for extending different pcrs by Eric Richter · 9 years ago
- 96d450b integrity: add measured_pcrs field to integrity cache by Eric Richter · 9 years ago
- b8b5727 security/integrity/ima/ima_policy.c: use %pU to output UUID in printable format by Andy Shevchenko · 9 years ago
- f4f27d0 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
- c52b761 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
- 0e0162b Merge branch 'ovl-fixes' into for-linus by Al Viro · 9 years ago
- 0250abc Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next by James Morris · 9 years ago
- d55201c Merge branch 'keys-trust' into keys-next by David Howells · 9 years ago
- cf90ea9 ima: fix the string representation of the LSM/IMA hook enumeration ordering by Mimi Zohar · 9 years ago
- 05d1a71 ima: add support for creating files using the mknodat syscall by Mimi Zohar · 9 years ago
- 42a4c60 ima: fix ima_inode_post_setattr by Mimi Zohar · 9 years ago
- 93da17b security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA by Andreas Ziegler · 9 years ago
- 56104cf IMA: Use the the system trusted keyrings instead of .ima_mok by David Howells · 9 years ago
- 77f68ba KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTED by David Howells · 9 years ago