summaryrefslogtreecommitdiff
path: root/security/integrity/ima/ima_main.c
AgeCommit message (Expand)AuthorFilesLines
2018-12-01ima: re-introduce own integrity cache lockDmitry Kasatkin1-22/+48
2018-12-01ima: always measure and audit files in policyMimi Zohar1-5/+4
2018-08-03ima: based on policy verify firmware signatures (pre-allocated buffer)Mimi Zohar1-0/+1
2018-05-30ima: Fallback to the builtin hash algorithmPetr Vorel1-0/+13
2017-12-10ima: fix hash algorithm initializationBoshi Wang1-0/+4
2017-01-27ima: allow to check MAY_APPENDLans Zhang1-3/+3
2017-01-27ima: fix ima_d_path() possible race with renameMimi Zohar1-3/+5
2016-12-20ima: store the builtin/custom template definitions in a listMimi Zohar1-0/+1
2016-09-16ima: use file_dentry()Miklos Szeredi1-1/+1
2016-06-30ima: change integrity cache to store measured pcrEric Richter1-1/+6
2016-06-30ima: include pcr for each measurement log entryEric Richter1-1/+1
2016-06-30ima: extend ima_get_action() to return the policy pcrEric Richter1-1/+2
2016-05-01ima: add support for creating files using the mknodat syscallMimi Zohar1-1/+24
2016-02-21ima: measure and appraise the IMA policy itselfMimi Zohar1-0/+1
2016-02-21ima: support for kexec image and initramfsMimi Zohar1-6/+9
2016-02-21module: replace copy_module_from_fd with kernel versionMimi Zohar1-22/+13
2016-02-21security: define kernel_read_file hookMimi Zohar1-0/+16
2016-02-21firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar1-11/+10
2016-02-21ima: define a new hook to measure and appraise a file already in memoryMimi Zohar1-8/+37
2016-02-19ima: use "ima_hooks" enum as function argumentMimi Zohar1-7/+7
2016-02-19ima: separate 'security.ima' reading functionality from collectDmitry Kasatkin1-4/+7
2016-01-23wrappers for ->i_mutex accessAl Viro1-4/+4
2015-05-21ima: pass iint to ima_add_violation()Roberto Sassu1-2/+3
2014-10-07ima: use path names cacheDmitry Kasatkin1-1/+2
2014-10-07ima: check ima_policy_flag in the ima_file_free() hookDmitry Kasatkin1-1/+1
2014-09-18ima: detect violations for mmaped filesRoberto Sassu1-4/+5
2014-09-18ima: fix race condition on ima_rdwr_violation_check and process_measurementRoberto Sassu1-21/+33
2014-09-18ima: added ima_policy_flag variableRoberto Sassu1-3/+5
2014-09-18ima: move keyring initialization to ima_init()Dmitry Kasatkin1-8/+2
2014-09-09ima: remove usage of filename parameterDmitry Kasatkin1-11/+8
2014-09-09ima: remove unnecessary extra variableDmitry Kasatkin1-4/+5
2014-09-09ima: simplify conditional statement to improve performanceDmitry Kasatkin1-4/+2
2014-09-09ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin1-8/+8
2014-09-09ima: provide flag to identify new empty filesDmitry Kasatkin1-5/+7
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar1-0/+11
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar1-2/+8
2014-07-17ima: delay template descriptor lookup until useDmitry Kasatkin1-1/+2
2014-07-17ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin1-4/+0
2014-06-13ima: check inode integrity cache in violation checkDmitry Kasatkin1-2/+7
2014-06-13ima: prevent unnecessary policy checkingDmitry Kasatkin1-9/+4
2014-06-03ima: audit log files opened with O_DIRECT flagMimi Zohar1-1/+4
2014-03-07ima: return d_name.name if d_path failsDmitry Kasatkin1-6/+1
2014-03-07integrity: fix checkpatch errorsDmitry Kasatkin1-2/+2
2013-11-01ima: extend the measurement list to include the file signatureMimi Zohar1-1/+2
2013-10-27ima: enable support for larger default filedata hash algorithmsMimi Zohar1-2/+24
2013-10-27ima: defer determining the appraisal hash algorithm for 'ima' templateRoberto Sassu1-1/+5
2013-10-26ima: pass the file descriptor to ima_add_violation()Roberto Sassu1-3/+2
2013-10-26ima: read and use signature hash algorithmDmitry Kasatkin1-2/+9
2013-10-26ima: provide support for arbitrary hash algorithmsDmitry Kasatkin1-2/+4
2013-10-25ima: fix script messagesDmitry Kasatkin1-5/+5