Linux kernel stable tree (mirror) https://git.radix-linux.su/kernel/linux.git/atom?h=v6.6.132 2021-03-15T19:32:32+00:00 2021-03-15T19:32:32+00:00 Jiele zhao unclexiaole@gmail.com 2021-03-08T02:03:58+00:00 urn:sha1:0860b72d535f869e26252df66d4f634e1655f84a Loadpin cmdline interface "enabled" has been renamed to "enforce" for a long time, but the User Description Document was not updated. (Meaning unchanged) And kernel_read_file* were moved from linux/fs.h to its own linux/kernel_read_file.h include file. So update that change here. Signed-off-by: Jiele zhao <unclexiaole@gmail.com> Link: https://lore.kernel.org/r/20210308020358.102836-1-unclexiaole@gmail.com Signed-off-by: Jonathan Corbet <corbet@lwn.net> 2019-05-31T20:57:40+00:00 Ke Wu mikewu@google.com 2019-05-30T19:22:08+00:00 urn:sha1:0ff9848067b7b950a4ed70de7f5028600a2157e3 Linux kernel already provide MODULE_SIG and KEXEC_VERIFY_SIG to make sure loaded kernel module and kernel image are trusted. This patch adds a kernel command line option "loadpin.exclude" which allows to exclude specific file types from LoadPin. This is useful when people want to use different mechanisms to verify module and kernel image while still use LoadPin to protect the integrity of other files kernel loads. Signed-off-by: Ke Wu <mikewu@google.com> Reviewed-by: James Morris <jamorris@linux.microsoft.com> [kees: fix array size issue reported by Coverity via Colin Ian King] Signed-off-by: Kees Cook <keescook@chromium.org> 2017-05-18T16:33:12+00:00 Kees Cook keescook@chromium.org 2017-05-13T11:51:48+00:00 urn:sha1:30da4f77aae99bf9ae5905d0ef89668391eea315 Adjusts for ReST markup and moves under LSM admin guide. Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Jonathan Corbet <corbet@lwn.net>