summaryrefslogtreecommitdiff
path: root/security/integrity/platform_certs
AgeCommit message (Expand)AuthorFilesLines
2022-03-08integrity: Only use machine keyring when uefi_check_trust_mok_keys is trueEric Snowberg2-1/+17
2022-03-08integrity: Trust MOK keys if MokListTrustedRT foundEric Snowberg1-0/+19
2022-03-08integrity: add new keyring handler for mok keysEric Snowberg3-3/+23
2022-03-08integrity: Introduce a Linux keyring called machineEric Snowberg1-0/+42
2022-03-08integrity: Fix warning about missing prototypesEric Snowberg1-0/+1
2021-12-24integrity: Do not load MOK and MOKx when secure boot be disabledLee, Chun-Yi1-0/+5
2021-08-27efi: Don't use knowledge about efi_guid_t internalsAndy Shevchenko1-1/+1
2021-03-11integrity: Load mokx variables into the blacklist keyringEric Snowberg1-2/+18
2021-03-11certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg1-0/+11
2020-09-16integrity: Load certs from the EFI MOK config tableLenny Szubowicz1-0/+22
2020-09-16integrity: Move import of MokListRT certs to a separate routineLenny Szubowicz1-19/+44
2020-02-26Merge tag 'efi-next' of git://git.kernel.org/pub/scm/linux/kernel/git/efi/efi...Ingo Molnar1-1/+1
2020-02-23integrity: Check properly whether EFI GetVariable() is availableArd Biesheuvel1-1/+1
2020-02-18efi: Only print errors about failing to get certs if EFI vars are foundJavier Martinez Canillas1-14/+26
2019-11-29x86/efi: remove unused variablesYueHaibing1-5/+0
2019-11-12powerpc: Load firmware trusted keys/hashes into kernel keyringNayna Jain1-0/+96
2019-11-12x86/efi: move common keyring handler functions to new fileNayna Jain3-66/+113
2019-07-11Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-10/+4
2019-06-28keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells1-4/+10
2019-04-26s390/ipl: read IPL report at early bootMartin Schwidefsky1-0/+36
2018-12-13efi: Allow the "db" UEFI variable to be suppressedJosh Boyer1-10/+35
2018-12-13efi: Import certificates from UEFI Secure BootJosh Boyer1-0/+169
2018-12-13efi: Add an EFI signature blob parserDave Howells1-0/+108
2018-12-13integrity: Load certs to the platform keyringNayna Jain1-0/+23
2018-12-13integrity: Define a trusted platform keyringNayna Jain1-0/+35