summaryrefslogtreecommitdiff
path: root/security/integrity/ima/ima_main.c
AgeCommit message (Expand)AuthorFilesLines
2023-11-28ima: detect changes to the backing overlay fileMimi Zohar1-1/+15
2023-03-11ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu1-2/+5
2023-01-14ima: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+1
2020-10-16Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-4/+19
2020-10-05IMA: Add support for file reads without contentsScott Branden1-6/+16
2020-10-05LSM: Add "contents" flag to kernel_read_file hookKees Cook1-1/+9
2020-10-05firmware_loader: Use security_post_load_data()Kees Cook1-10/+10
2020-10-05LSM: Introduce kernel_post_load_data() hookKees Cook1-1/+23
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden1-0/+1
2020-10-05fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook1-4/+2
2020-09-17ima: Fix NULL pointer dereference in ima_file_hashKP Singh1-0/+10
2020-09-09integrity: invalid kernel parameters feedbackBruno Meneguele1-4/+9
2020-07-20ima: Support additional conditionals in the KEXEC_CMDLINE hook functionTyler Hicks1-6/+17
2020-07-17IMA: Add audit log for failure conditionsLakshmi Ramasubramanian1-5/+13
2020-06-12ima: fix mprotect checkingMimi Zohar1-1/+2
2020-05-22ima: verify mprotect change is consistent with mmap policyMimi Zohar1-0/+51
2020-04-20ima: Evaluate error in init_ima()Roberto Sassu1-0/+3
2020-02-28integrity: Remove duplicate pr_fmt definitionsTushar Sugandhi1-2/+0
2020-02-28IMA: Add log statements for failure conditionsTushar Sugandhi1-0/+3
2020-01-22ima: add the ability to query the cached hash of a given fileFlorent Revest1-0/+49
2019-12-12IMA: Add support to limit measuring keysLakshmi Ramasubramanian1-4/+5
2019-12-12IMA: Check IMA policy flagLakshmi Ramasubramanian1-0/+3
2019-11-12ima: Check against blacklisted hashes for files with modsigNayna Jain1-4/+8
2019-11-12ima: Make process_buffer_measurement() genericNayna Jain1-18/+40
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-2/+2
2019-08-20kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett1-1/+1
2019-08-20kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac1-1/+1
2019-08-06ima: Store the measurement again when appraising a modsigThiago Jung Bauermann1-3/+12
2019-08-06ima: Define ima-modsig templateThiago Jung Bauermann1-1/+1
2019-08-06ima: Collect modsigThiago Jung Bauermann1-1/+1
2019-08-06ima: Implement support for module-style appended signaturesThiago Jung Bauermann1-2/+9
2019-07-09Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-6/+117
2019-07-01IMA: Define a new template field bufPrakhar Srivastava1-1/+3
2019-06-24IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava1-0/+72
2019-06-20IMA: support for per policy rule template formatsMatthew Garrett1-4/+5
2019-06-14ima: use the lsm policy update notifierJanne Karhunen1-0/+8
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner1-5/+1
2019-06-04ima: prevent a file already mmap'ed write to be mmap'ed executeMimi Zohar1-2/+30
2019-02-05ima: define ima_post_create_tmpfile() hook and add missing callMimi Zohar1-2/+33
2019-01-02Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-7/+14
2018-12-20security: integrity: partial revert of make ima_main explicitly non-modularPaul Gortmaker1-1/+1
2018-12-17Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...James Morris1-7/+14
2018-12-13ima: Use inode_is_open_for_writeNikolay Borisov1-1/+1
2018-12-13security: integrity: make ima_main explicitly non-modularPaul Gortmaker1-4/+3
2018-12-11ima: prevent kexec_load syscall based on runtime secureboot flagNayna Jain1-6/+13
2018-10-10security/integrity: constify some read-only dataEric Biggers1-1/+1
2018-08-15Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-14/+54
2018-07-16ima: based on policy warn about loading firmware (pre-allocated buffer)Mimi Zohar1-0/+8
2018-07-16module: replace the existing LSM hook in init_moduleMimi Zohar1-13/+10
2018-07-16ima: based on policy require signed firmware (sysfs fallback)Mimi Zohar1-1/+9