summaryrefslogtreecommitdiff
path: root/security/loadpin
AgeCommit message (Expand)AuthorFilesLines
2024-05-24Merge tag 'hardening-v6.10-rc1-fixes' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-0/+3
2024-05-18loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompressionStephen Boyd1-0/+3
2024-04-15lsm: remove the now superfluous sentinel element from ctl_table arrayJoel Granados1-1/+0
2023-11-13lsm: mark the lsm_id variables are marked as staticPaul Moore1-1/+1
2023-11-13LSM: Identify modules by more than nameCasey Schaufler1-1/+8
2023-08-26LoadPin: Annotate struct dm_verity_loadpin_trusted_root_digest with __counted_byKees Cook1-2/+1
2023-04-28Merge tag 'sysctl-6.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/m...Linus Torvalds1-7/+1
2023-04-13loadpin: simplify sysctls use with register_sysctl()Luis Chamberlain1-7/+1
2023-03-20selinux: remove the runtime disable functionalityPaul Moore1-1/+1
2023-01-20LoadPin: Allow filesystem switch when not enforcingKees Cook1-5/+11
2023-01-20LoadPin: Move pin reporting cleanly out of lockingKees Cook1-9/+6
2023-01-20LoadPin: Refactor sysctl initializationKees Cook1-16/+19
2023-01-20LoadPin: Refactor read-only check into a helperKees Cook1-12/+21
2022-12-15LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook1-12/+18
2022-09-08LoadPin: Require file with verity root digests to have a headerMatthias Kaehlcke2-2/+21
2022-09-08LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke1-1/+1
2022-08-16LoadPin: Return EFAULT on copy_from_user() failuresKees Cook1-4/+2
2022-07-08LoadPin: Enable loading from trusted dm-verity devicesMatthias Kaehlcke2-1/+182
2022-05-17loadpin: stop using bdevnameChristoph Hellwig1-4/+1
2020-10-05LSM: Add "contents" flag to kernel_read_file hookKees Cook1-2/+12
2020-10-05LSM: Introduce kernel_post_load_data() hookKees Cook1-1/+1
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden1-0/+1
2020-06-24block: move block-related definitions out of fs.hChristoph Hellwig1-0/+1
2019-07-19proc/sysctl: add shared variables for range checkMatteo Croce1-4/+2
2019-07-12Merge tag 'loadpin-v5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-0/+48
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Thomas Gleixner1-9/+1
2019-05-31security/loadpin: Allow to exclude specific file typesKe Wu1-0/+48
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner2-0/+2
2019-01-09LoadPin: Initialize as ordered LSMKees Cook1-1/+7
2018-10-19LoadPin: Rename boot param "enabled" to "enforce"Kees Cook2-12/+13
2018-10-19LoadPin: Report friendly block device nameKees Cook1-1/+4
2018-07-16module: replace the existing LSM hook in init_moduleMimi Zohar1-0/+6
2018-02-22get rid of pointless includes of fs_struct.hAl Viro1-1/+0
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-1/+1
2016-05-17LSM: LoadPin: provide enablement CONFIGKees Cook2-6/+15
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook3-0/+201