aboutsummaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_main.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2016-02-21ima: support for kexec image and initramfsMimi Zohar1-6/+9
2016-02-21module: replace copy_module_from_fd with kernel versionMimi Zohar1-22/+13
2016-02-21security: define kernel_read_file hookMimi Zohar1-0/+16
2016-02-21firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar1-11/+10
2016-02-20ima: define a new hook to measure and appraise a file already in memoryMimi Zohar1-8/+37
2016-02-18ima: use "ima_hooks" enum as function argumentMimi Zohar1-7/+7
2016-02-18ima: separate 'security.ima' reading functionality from collectDmitry Kasatkin1-4/+7
2016-01-22wrappers for ->i_mutex accessAl Viro1-4/+4
2015-05-21ima: pass iint to ima_add_violation()Roberto Sassu1-2/+3
2014-10-07ima: use path names cacheDmitry Kasatkin1-1/+2
2014-10-07ima: check ima_policy_flag in the ima_file_free() hookDmitry Kasatkin1-1/+1
2014-09-18ima: detect violations for mmaped filesRoberto Sassu1-4/+5
2014-09-18ima: fix race condition on ima_rdwr_violation_check and process_measurementRoberto Sassu1-21/+33
2014-09-17ima: added ima_policy_flag variableRoberto Sassu1-3/+5
2014-09-17ima: move keyring initialization to ima_init()Dmitry Kasatkin1-8/+2
2014-09-09ima: remove usage of filename parameterDmitry Kasatkin1-11/+8
2014-09-09ima: remove unnecessary extra variableDmitry Kasatkin1-4/+5
2014-09-09ima: simplify conditional statement to improve performanceDmitry Kasatkin1-4/+2
2014-09-09ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin1-8/+8
2014-09-08ima: provide flag to identify new empty filesDmitry Kasatkin1-5/+7
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar1-0/+11
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar1-2/+8
2014-07-17ima: delay template descriptor lookup until useDmitry Kasatkin1-1/+2
2014-07-17ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin1-4/+0
2014-06-12ima: check inode integrity cache in violation checkDmitry Kasatkin1-2/+7
2014-06-12ima: prevent unnecessary policy checkingDmitry Kasatkin1-9/+4
2014-06-03ima: audit log files opened with O_DIRECT flagMimi Zohar1-1/+4
2014-03-07ima: return d_name.name if d_path failsDmitry Kasatkin1-6/+1
2014-03-07integrity: fix checkpatch errorsDmitry Kasatkin1-2/+2
2013-10-31ima: extend the measurement list to include the file signatureMimi Zohar1-1/+2
2013-10-26ima: enable support for larger default filedata hash algorithmsMimi Zohar1-2/+24
2013-10-26ima: defer determining the appraisal hash algorithm for 'ima' templateRoberto Sassu1-1/+5
2013-10-25ima: pass the file descriptor to ima_add_violation()Roberto Sassu1-3/+2
2013-10-25ima: read and use signature hash algorithmDmitry Kasatkin1-2/+9
2013-10-25ima: provide support for arbitrary hash algorithmsDmitry Kasatkin1-2/+4
2013-10-25ima: fix script messagesDmitry Kasatkin1-5/+5
2013-06-29Replace a bunch of file->dentry->d_inode refs with file_inode()David Howells1-1/+1
2013-04-17ima: eliminate passing d_name.name to process_measurement()Mimi Zohar1-9/+5
2013-02-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-2/+2
2013-02-26ima: "remove enforce checking duplication" merge fixMimi Zohar1-1/+2
2013-02-22new helper: file_inode(file)Al Viro1-2/+2
2013-02-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds1-75/+63
2013-01-22ima: differentiate appraise status only for hook specific rulesMimi Zohar1-3/+6
2013-01-22ima: per hook cache integrity appraisal statusMimi Zohar1-8/+11
2013-01-22ima: added policy support for 'security.ima' typeDmitry Kasatkin1-0/+1
2013-01-16ima: forbid write access to files with digital signaturesDmitry Kasatkin1-2/+5
2013-01-16ima: move full pathname resolution to separate functionDmitry Kasatkin1-31/+20
2013-01-16ima: rename FILE_MMAP to MMAP_CHECKMimi Zohar1-1/+1
2013-01-16ima: remove enforce checking duplicationDmitry Kasatkin1-32/+20
2012-12-24ima: fallback to MODULE_SIG_ENFORCE for existing kernel module syscallMimi Zohar1-4/+8