summaryrefslogtreecommitdiff
path: root/security/integrity/ima/ima_policy.c
AgeCommit message (Expand)AuthorFilesLines
2024-07-18ima: Avoid blocking in RCU read-side critical sectionGUO Zihua1-6/+9
2024-05-25ima: fix deadlock when traversing "ima_default_rules".liqiong1-9/+20
2023-07-27ima: Fix build warningsRoberto Sassu1-1/+2
2023-01-14ima: Simplify ima_lsm_copy_ruleGUO Zihua1-7/+3
2023-01-14ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua1-9/+32
2023-01-14ima: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+2
2022-07-29lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg1-0/+4
2022-02-16ima: Do not print policy rule with inactive LSM labelsStefan Berger1-0/+8
2020-10-16Merge tag 'integrity-v5.10' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-51/+102
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden1-0/+1
2020-09-15ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar1-5/+4
2020-09-09integrity: invalid kernel parameters feedbackBruno Meneguele1-0/+2
2020-09-01ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks1-2/+4
2020-09-01ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks1-45/+93
2020-08-24treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-4/+4
2020-07-21ima: Rename internal filter rule functionsTyler Hicks1-17/+13
2020-07-20ima: Support additional conditionals in the KEXEC_CMDLINE hook functionTyler Hicks1-11/+6
2020-07-20ima: Use the common function to detect LSM conditionals in a ruleTyler Hicks1-9/+2
2020-07-20ima: Move comprehensive rule validation checks out of the token parserTyler Hicks1-20/+37
2020-07-20ima: Use correct type for the args_p member of ima_rule_entry.lsm elementsTyler Hicks1-9/+9
2020-07-20ima: Shallow copy the args_p member of ima_rule_entry.lsm elementsTyler Hicks1-10/+8
2020-07-20ima: Fail rule parsing when appraise_flag=blacklist is unsupportableTyler Hicks1-1/+14
2020-07-17ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid condTyler Hicks1-0/+7
2020-07-17ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invali...Tyler Hicks1-0/+21
2020-07-17ima: Fail rule parsing when buffer hook functions have an invalid actionTyler Hicks1-2/+38
2020-07-17ima: Free the entire rule if it fails to parseTyler Hicks1-1/+2
2020-07-17ima: Free the entire rule when deleting a list of rulesTyler Hicks1-5/+24
2020-07-17ima: Have the LSM free its audit ruleTyler Hicks1-1/+1
2020-07-17IMA: Add audit log for failure conditionsLakshmi Ramasubramanian1-1/+1
2020-06-03ima: Directly assign the ima_default_policy pointer to ima_rulesRoberto Sassu1-2/+1
2020-05-08ima: Set again build_ima_appraise variableKrzysztof Struczynski1-2/+8
2020-05-08ima: Remove redundant policy rule set in add_rules()Krzysztof Struczynski1-4/+1
2020-02-28integrity: Remove duplicate pr_fmt definitionsTushar Sugandhi1-2/+0
2020-01-29Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-24/+141
2020-01-23IMA: Call workqueue functions to measure queued keysLakshmi Ramasubramanian1-0/+3
2020-01-22IMA: pre-allocate buffer to hold keyrings stringLakshmi Ramasubramanian1-8/+30
2020-01-22ima: ima/lsm policy rule loading logic bug fixesJanne Karhunen1-18/+26
2020-01-22ima: Add a space after printing LSM rules for readabilityClay Chang1-0/+1
2019-12-12IMA: Read keyrings= option from the IMA policyLakshmi Ramasubramanian1-1/+28
2019-12-12IMA: Add support to limit measuring keysLakshmi Ramasubramanian1-4/+58
2019-12-12IMA: Add KEY_CHECK func to measure keysLakshmi Ramasubramanian1-1/+3
2019-12-09treewide: Use sizeof_field() macroPankaj Bharadiya1-2/+2
2019-11-12ima: Check against blacklisted hashes for files with modsigNayna Jain1-2/+10
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-0/+50
2019-08-20kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett1-0/+50
2019-08-06ima: Define ima-modsig templateThiago Jung Bauermann1-0/+41
2019-08-06ima: Implement support for module-style appended signaturesThiago Jung Bauermann1-6/+6
2019-08-06ima: Add modsig appraise_type option for module-style appended signaturesThiago Jung Bauermann1-2/+10
2019-08-01ima: initialize the "template" field with the default templateMimi Zohar1-2/+4
2019-07-09Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-23/+140