aboutsummaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/ima_policy.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2021-04-20ima: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+2
2021-02-23Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linuxLinus Torvalds1-8/+12
2021-01-24ima: handle idmapped mountsChristian Brauner1-8/+12
2021-01-14IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian1-0/+12
2021-01-14IMA: limit critical data measurement based on a labelTushar Sugandhi1-3/+34
2021-01-14IMA: add policy rule to measure critical dataTushar Sugandhi1-4/+25
2021-01-14IMA: generalize keyring specific measurement constructsTushar Sugandhi1-17/+26
2020-11-20ima: select ima-buf template for buffer measurementLakshmi Ramasubramanian1-1/+1
2020-10-15Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds1-51/+102
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden1-0/+1
2020-09-15ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar1-5/+4
2020-09-08integrity: invalid kernel parameters feedbackBruno Meneguele1-0/+2
2020-08-31ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks1-2/+4
2020-08-31ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks1-45/+93
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-4/+4
2020-07-20ima: Rename internal filter rule functionsTyler Hicks1-17/+13
2020-07-20ima: Support additional conditionals in the KEXEC_CMDLINE hook functionTyler Hicks1-11/+6
2020-07-20ima: Use the common function to detect LSM conditionals in a ruleTyler Hicks1-9/+2
2020-07-20ima: Move comprehensive rule validation checks out of the token parserTyler Hicks1-20/+37
2020-07-20ima: Use correct type for the args_p member of ima_rule_entry.lsm elementsTyler Hicks1-9/+9
2020-07-20ima: Shallow copy the args_p member of ima_rule_entry.lsm elementsTyler Hicks1-10/+8
2020-07-20ima: Fail rule parsing when appraise_flag=blacklist is unsupportableTyler Hicks1-1/+14
2020-07-16ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid condTyler Hicks1-0/+7
2020-07-16ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invalid condTyler Hicks1-0/+21
2020-07-16ima: Fail rule parsing when buffer hook functions have an invalid actionTyler Hicks1-2/+38
2020-07-16ima: Free the entire rule if it fails to parseTyler Hicks1-1/+2
2020-07-16ima: Free the entire rule when deleting a list of rulesTyler Hicks1-5/+24
2020-07-16ima: Have the LSM free its audit ruleTyler Hicks1-1/+1
2020-07-16IMA: Add audit log for failure conditionsLakshmi Ramasubramanian1-1/+1
2020-06-03ima: Directly assign the ima_default_policy pointer to ima_rulesRoberto Sassu1-2/+1
2020-05-07ima: Set again build_ima_appraise variableKrzysztof Struczynski1-2/+8
2020-05-07ima: Remove redundant policy rule set in add_rules()Krzysztof Struczynski1-4/+1
2020-02-28integrity: Remove duplicate pr_fmt definitionsTushar Sugandhi1-2/+0
2020-01-28Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds1-24/+141
2020-01-23IMA: Call workqueue functions to measure queued keysLakshmi Ramasubramanian1-0/+3
2020-01-22IMA: pre-allocate buffer to hold keyrings stringLakshmi Ramasubramanian1-8/+30
2020-01-22ima: ima/lsm policy rule loading logic bug fixesJanne Karhunen1-18/+26
2020-01-22ima: Add a space after printing LSM rules for readabilityClay Chang1-0/+1
2019-12-12IMA: Read keyrings= option from the IMA policyLakshmi Ramasubramanian1-1/+28
2019-12-12IMA: Add support to limit measuring keysLakshmi Ramasubramanian1-4/+58
2019-12-12IMA: Add KEY_CHECK func to measure keysLakshmi Ramasubramanian1-1/+3
2019-12-09treewide: Use sizeof_field() macroPankaj Bharadiya1-2/+2
2019-11-12ima: Check against blacklisted hashes for files with modsigNayna Jain1-2/+10
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds1-0/+50
2019-08-19kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett1-0/+50
2019-08-05ima: Define ima-modsig templateThiago Jung Bauermann1-0/+41
2019-08-05ima: Implement support for module-style appended signaturesThiago Jung Bauermann1-6/+6
2019-08-05ima: Add modsig appraise_type option for module-style appended signaturesThiago Jung Bauermann1-2/+10
2019-08-01ima: initialize the "template" field with the default templateMimi Zohar1-2/+4
2019-07-08Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds1-23/+140
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.