Age | Commit message (Expand) | Author | Files | Lines |
2023-08-26 | LoadPin: Annotate struct dm_verity_loadpin_trusted_root_digest with __counted_by | Kees Cook | 1 | -2/+1 |
2023-04-28 | Merge tag 'sysctl-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m... | Linus Torvalds | 1 | -7/+1 |
2023-04-13 | loadpin: simplify sysctls use with register_sysctl() | Luis Chamberlain | 1 | -7/+1 |
2023-03-20 | selinux: remove the runtime disable functionality | Paul Moore | 1 | -1/+1 |
2023-01-20 | LoadPin: Allow filesystem switch when not enforcing | Kees Cook | 1 | -5/+11 |
2023-01-20 | LoadPin: Move pin reporting cleanly out of locking | Kees Cook | 1 | -9/+6 |
2023-01-20 | LoadPin: Refactor sysctl initialization | Kees Cook | 1 | -16/+19 |
2023-01-20 | LoadPin: Refactor read-only check into a helper | Kees Cook | 1 | -12/+21 |
2022-12-15 | LoadPin: Ignore the "contents" argument of the LSM hooks | Kees Cook | 1 | -12/+18 |
2022-09-08 | LoadPin: Require file with verity root digests to have a header | Matthias Kaehlcke | 2 | -2/+21 |
2022-09-08 | LoadPin: Fix Kconfig doc about format of file with verity digests | Matthias Kaehlcke | 1 | -1/+1 |
2022-08-16 | LoadPin: Return EFAULT on copy_from_user() failures | Kees Cook | 1 | -4/+2 |
2022-07-08 | LoadPin: Enable loading from trusted dm-verity devices | Matthias Kaehlcke | 2 | -1/+182 |
2022-05-17 | loadpin: stop using bdevname | Christoph Hellwig | 1 | -4/+1 |
2020-10-05 | LSM: Add "contents" flag to kernel_read_file hook | Kees Cook | 1 | -2/+12 |
2020-10-05 | LSM: Introduce kernel_post_load_data() hook | Kees Cook | 1 | -1/+1 |
2020-10-05 | fs/kernel_read_file: Split into separate include file | Scott Branden | 1 | -0/+1 |
2020-06-24 | block: move block-related definitions out of fs.h | Christoph Hellwig | 1 | -0/+1 |
2019-07-19 | proc/sysctl: add shared variables for range check | Matteo Croce | 1 | -4/+2 |
2019-07-12 | Merge tag 'loadpin-v5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git... | Linus Torvalds | 1 | -0/+48 |
2019-06-05 | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282 | Thomas Gleixner | 1 | -9/+1 |
2019-05-31 | security/loadpin: Allow to exclude specific file types | Ke Wu | 1 | -0/+48 |
2019-05-21 | treewide: Add SPDX license identifier - Makefile/Kconfig | Thomas Gleixner | 2 | -0/+2 |
2019-01-09 | LoadPin: Initialize as ordered LSM | Kees Cook | 1 | -1/+7 |
2018-10-19 | LoadPin: Rename boot param "enabled" to "enforce" | Kees Cook | 2 | -12/+13 |
2018-10-19 | LoadPin: Report friendly block device name | Kees Cook | 1 | -1/+4 |
2018-07-16 | module: replace the existing LSM hook in init_module | Mimi Zohar | 1 | -0/+6 |
2018-02-22 | get rid of pointless includes of fs_struct.h | Al Viro | 1 | -1/+0 |
2017-03-06 | security: mark LSM hooks as __ro_after_init | James Morris | 1 | -1/+1 |
2017-01-19 | LSM: Add /sys/kernel/security/lsm | Casey Schaufler | 1 | -1/+1 |
2016-05-17 | LSM: LoadPin: provide enablement CONFIG | Kees Cook | 2 | -6/+15 |
2016-04-21 | LSM: LoadPin for kernel file loading restrictions | Kees Cook | 3 | -0/+201 |