summaryrefslogtreecommitdiff
path: root/security/integrity/ima/ima_appraise.c
AgeCommit message (Expand)AuthorFilesLines
11 daysima: Check for ERR_PTR from dentry_path() in validate_hash_algo()Bradley Morgan1-0/+2
2026-08-04ima: fix out-of-bounds read in xattr_verify()Lincoln Wallace1-2/+7
2026-04-27ima: return error early if file xattr cannot be changedGoldwyn Rodrigues1-0/+5
2026-04-27ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIGKamlesh Kumar1-2/+3
2026-04-01ima: add support to require IMA sigv3 signaturesMimi Zohar1-0/+7
2026-04-01ima: add regular file data hash signature version 3 supportMimi Zohar1-1/+1
2026-04-01ima: Define asymmetric_verify_v3() to verify IMA sigv3 signaturesMimi Zohar1-50/+13
2026-03-05evm: fix security.evm for a file with IMA signatureCoiby Xu1-0/+5
2026-03-05integrity: Make arch_ima_get_secureboot integrity-wideCoiby Xu1-1/+1
2025-12-29ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()Chris J Arges1-13/+3
2025-10-03ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattrCoiby Xu1-5/+18
2024-12-18ima: instantiate the bprm_creds_for_exec() hookMimi Zohar1-2/+25
2024-10-11lsm: use lsm_prop in security_current_getsecidCasey Schaufler1-3/+3
2024-04-08integrity: Avoid -Wflex-array-member-not-at-end warningsGustavo A. R. Silva1-1/+3
2024-02-15ima: Make it independent from 'integrity' LSMRoberto Sassu1-15/+12
2024-02-15evm: Make it independent from 'integrity' LSMRoberto Sassu1-1/+1
2024-02-15ima: Move IMA-Appraisal to LSM infrastructureRoberto Sassu1-9/+29
2024-02-15ima: Align ima_inode_removexattr() definition with LSM infrastructureRoberto Sassu1-1/+2
2024-02-15ima: Align ima_inode_setxattr() definition with LSM infrastructureRoberto Sassu1-2/+3
2024-02-15ima: Align ima_inode_post_setattr() definition with LSM infrastructureRoberto Sassu1-1/+2
2023-08-01integrity: Always reference the blacklist keyring with appraisalEric Snowberg1-5/+7
2023-02-22Merge tag 'integrity-v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds1-0/+3
2023-01-31ima: Introduce MMAP_CHECK_REQPROT hookRoberto Sassu1-0/+3
2023-01-19fs: port acl to mnt_idmapChristian Brauner1-1/+1
2023-01-19fs: port xattr to mnt_idmapChristian Brauner1-7/+7
2023-01-19fs: port ->permission() to pass mnt_idmapChristian Brauner1-1/+1
2022-12-13Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-3/+3
2022-11-18lsm,fs: fix vfs_getxattr_alloc() return type and caller error pathsPaul Moore1-3/+3
2022-10-20integrity: implement get and set acl hookChristian Brauner1-0/+9
2022-08-23ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar1-4/+8
2022-07-07ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu1-1/+2
2022-05-05ima: support fs-verity file digest based version 3 signaturesMimi Zohar1-4/+110
2021-11-22lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore1-1/+1
2021-08-23IMA: reject unknown hash algorithms in ima_get_hash_algoTHOBY Simon1-1/+2
2021-08-16IMA: introduce a new policy option func=SETXATTR_CHECKTHOBY Simon1-5/+24
2021-08-16IMA: add support to restrict the hash algorithms used for file appraisalTHOBY Simon1-2/+3
2021-08-16IMA: block writes of the security.ima xattr with unsupported algorithmsTHOBY Simon1-3/+46
2021-07-23ima: Add digest and digest_len params to the functions to measure a bufferRoberto Sassu1-1/+1
2021-06-10ima: differentiate between EVM failures in the audit logMimi Zohar1-1/+2
2021-06-01ima: Don't remove security.ima if file must not be appraisedRoberto Sassu1-2/+0
2021-06-01ima: Allow imasig requirement to be satisfied by EVM portable signaturesRoberto Sassu1-7/+17
2021-05-21evm: Allow xattr/attr operations for portable signaturesRoberto Sassu1-0/+2
2021-05-21evm: Introduce evm_revalidate_status()Roberto Sassu1-5/+10
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore1-1/+1
2021-02-23Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-10/+13
2021-01-24ima: handle idmapped mountsChristian Brauner1-6/+9
2021-01-24xattr: handle idmapped mountsTycho Andersen1-4/+4
2021-01-14IMA: add support to measure buffer data hashTushar Sugandhi1-1/+1
2020-11-02ima: defer arch_ima_get_secureboot() call to IMA init timeArd Biesheuvel1-6/+11
2020-10-15Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-8/+19