Sign in
android-kvm
/
linux
/
9b6e57e5a51696171de990b3c41bd53d4b8ab8ac
/
security
/
integrity
/
ima
/
ima_policy.c
be37f21
Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
by Linus Torvalds
· 6 years ago
09186e5
security: mark expected switch fall-throughs and add a missing break
by Gustavo A. R. Silva
· 6 years ago
90462a5
audit: remove unused actx param from audit_rule_match
by Richard Guy Briggs
· 6 years ago
f218a29
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
3f03bf9
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
1a9430d
ima: cleanup the match_token policy code
by Mimi Zohar
· 6 years ago
5580b4a
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity
by James Morris
· 6 years ago
876979c
security: audit and remove any unnecessary uses of module.h
by Paul Gortmaker
· 6 years ago
060190f
ima: don't measure/appraise files on efivarfs
by Mimi Zohar
· 6 years ago
6191706
ima: add support for arch specific policies
by Nayna Jain
· 6 years ago
c52657d
ima: refactor ima_init_policy()
by Nayna Jain
· 6 years ago
dba31ee
ima: Differentiate auditing policy rules from "audit" actions
by Stefan Berger
· 7 years ago
2afd020a
ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set
by Stefan Berger
· 7 years ago
3d2859d
ima: Use audit_log_format() rather than audit_log_string()
by Stefan Berger
· 7 years ago
8a3bcaf
ima: Call audit_log_string() rather than logging it untrusted
by Stefan Berger
· 7 years ago
ef96837
ima: add build time policy
by Mimi Zohar
· 7 years ago
16c267a
ima: based on policy require signed kexec kernel images
by Mimi Zohar
· 7 years ago
53b626f
IMA: use list_splice_tail_init_rcu() instead of its open coded variant
by Petko Manolov
· 7 years ago
6f0911a
ima: fix updating the ima_appraise flag
by Mimi Zohar
· 7 years ago
f1b08bb
ima: define a new policy condition based on the filesystem name
by Mimi Zohar
· 7 years ago
1c070b1
ima: Add smackfs to the default appraise/measure list
by Martin Townsend
· 7 years ago
9e67028
ima: fail signature verification based on policy
by Mimi Zohar
· 7 years ago
a9a4935
ima: clear IMA_HASH
by Mimi Zohar
· 7 years ago
d906c10
IMA: Support using new creds in appraisal policy
by Matthew Garrett
· 7 years ago
3644745
ima/policy: fix parsing of fsuuid
by Mike Rapoport
· 7 years ago
da1b002
ima: support new "hash" and "dont_hash" policy actions
by Mimi Zohar
· 8 years ago
39adb92
ima: Fix bool initialization/comparison
by Thomas Meyer
· 7 years ago
e24dd9e
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
2663218
ima: Simplify policy_func_show.
by Thiago Jung Bauermann
· 8 years ago
bb543e3
integrity: Small code improvements
by Thiago Jung Bauermann
· 8 years ago
82e3bb4
ima: Add cgroups2 to the defaults list
by Laura Abbott
· 8 years ago
503ceae
ima: define a set of appraisal rules requiring file signatures
by Mimi Zohar
· 8 years ago
33ce954
ima: extend the "ima_policy" boot command line to support multiple policies
by Mimi Zohar
· 8 years ago
8578709
fs: switch ->s_uuid to uuid_t
by Christoph Hellwig
· 8 years ago
787d8c5
ima/policy: switch to use uuid_t
by Christoph Hellwig
· 8 years ago
1dd771e
block: remove blk_part_pack_uuid
by Christoph Hellwig
· 8 years ago
3dd0c8d
ima: provide ">" and "<" operators for fowner/uid/euid rules.
by Mikhail Kurinnoi
· 8 years ago
bad4417
integrity: mark default IMA rules as __ro_after_init
by James Morris
· 8 years ago
725de7f
ima: extend ima_get_action() to return the policy pcr
by Eric Richter
· 9 years ago
0260643
ima: add policy support for extending different pcrs
by Eric Richter
· 9 years ago
b8b5727
security/integrity/ima/ima_policy.c: use %pU to output UUID in printable format
by Andy Shevchenko
· 9 years ago
cf90ea9
ima: fix the string representation of the LSM/IMA hook enumeration ordering
by Mimi Zohar
· 9 years ago
95ee08f
ima: require signed IMA policy
by Mimi Zohar
· 9 years ago
19f8a84
ima: measure and appraise the IMA policy itself
by Mimi Zohar
· 9 years ago
d9ddf07
ima: support for kexec image and initramfs
by Mimi Zohar
· 9 years ago
c6af8ef
ima: remove firmware and module specific cached status info
by Mimi Zohar
· 9 years ago
cf22221
ima: define a new hook to measure and appraise a file already in memory
by Mimi Zohar
· 9 years ago
4ad87a3
ima: use "ima_hooks" enum as function argument
by Mimi Zohar
· 9 years ago
b5269ab
ima: refactor ima_policy_show() to display "ima_hooks" rules
by Mimi Zohar
· 9 years ago
c75d8e9
IMA: fix non-ANSI declaration of ima_check_policy()
by Colin Ian King
· 9 years ago
0112721
IMA: policy can be updated zero times
by Sasha Levin
· 9 years ago
6ad6afa
ima: update appraise flags after policy update completes
by Mimi Zohar
· 9 years ago
80eae20
IMA: allow reading back the current IMA policy
by Petko Manolov
· 9 years ago
38d859f
IMA: policy can now be updated multiple times
by Petko Manolov
· 9 years ago
24fd03c
ima: update builtin policies
by Mimi Zohar
· 10 years ago
4351c294
ima: extend "mask" policy matching support
by Mimi Zohar
· 10 years ago
139069e
ima: add support for new "euid" policy condition
by Mimi Zohar
· 10 years ago
cd025f7
ima: do not measure or appraise the NSFS filesystem
by Mimi Zohar
· 10 years ago
6438de9
ima: skip measurement of cgroupfs files and update documentation
by Roberto Sassu
· 10 years ago
5577857
ima: cleanup ima_init_policy() a little
by Dan Carpenter
· 10 years ago
c57782c
ima: require signature based appraisal
by Dmitry Kasatkin
· 10 years ago
0716abb
ima: use atomic bit operations to protect policy update interface
by Dmitry Kasatkin
· 10 years ago
7178784
ima: ignore empty and with whitespaces policy lines
by Dmitry Kasatkin
· 10 years ago
272a6e9
ima: no need to allocate entry for comment
by Dmitry Kasatkin
· 10 years ago
a756024
ima: added ima_policy_flag variable
by Roberto Sassu
· 10 years ago
5a9196d
ima: add support for measuring and appraising firmware
by Mimi Zohar
· 11 years ago
7e9001f
audit: fix dangling keywords in integrity ima message output
by Richard Guy Briggs
· 11 years ago
f9b2a73
ima: audit log files opened with O_DIRECT flag
by Mimi Zohar
· 11 years ago
2bb930a
integrity: fix checkpatch errors
by Dmitry Kasatkin
· 11 years ago
09b1148
ima: fix erroneous removal of security.ima xattr
by Dmitry Kasatkin
· 11 years ago
52a1328
ima: use static const char array definitions
by Mimi Zohar
· 11 years ago
29707b2
security: replace strict_strto*() with kstrto*()
by Jingoo Han
· 11 years ago
08de59e
Revert "ima: policy for RAMFS"
by Mimi Zohar
· 11 years ago
446d64e
block: fix part_pack_uuid() build error
by Mimi Zohar
· 12 years ago
33673dc
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 12 years ago
85865c1
ima: add policy support for file system uuid
by Dmitry Kasatkin
· 13 years ago
5a73fcf
ima: differentiate appraise status only for hook specific rules
by Mimi Zohar
· 12 years ago
d79d72e
ima: per hook cache integrity appraisal status
by Mimi Zohar
· 12 years ago
0e5a247
ima: added policy support for 'security.ima' type
by Dmitry Kasatkin
· 13 years ago
16cac49
ima: rename FILE_MMAP to MMAP_CHECK
by Mimi Zohar
· 12 years ago
7163a99
ima: re-initialize IMA policy LSM info
by Mimi Zohar
· 12 years ago
a7f2a36
ima: fallback to MODULE_SIG_ENFORCE for existing kernel module syscall
by Mimi Zohar
· 12 years ago
fdf9072
ima: support new kernel module syscall
by Mimi Zohar
· 12 years ago
88265322
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 12 years ago
8b94eea
userns: Add user namespace support to IMA
by Eric W. Biederman
· 13 years ago
e7c568e
ima: audit log hashes
by Peter Moody
· 13 years ago
45e2472
ima: generic IMA action flag handling
by Dmitry Kasatkin
· 12 years ago
07f6a79
ima: add appraise action keywords and default rules
by Mimi Zohar
· 14 years ago
2fe5d6d
ima: integrity appraisal extension
by Mimi Zohar
· 13 years ago
8445d64
ima: add policy for pseudo fs
by Dmitry Kasatkin
· 13 years ago
b0d5de4
IMA: fix audit res field to indicate 1 for success and 0 for failure
by Eric Paris
· 13 years ago
9e3ff38
Merge branch 'next-queue' into next
by James Morris
· 13 years ago
4c2c392
ima: policy for RAMFS
by Dmitry Kasatkin
· 13 years ago
3db59dd
ima: fix cred sparse warning
by Mimi Zohar
· 13 years ago
867c202
ima: fix add LSM rule bug
by Mimi Zohar
· 14 years ago
0ffbe26
Merge branch 'master' into next
by James Morris
· 15 years ago
2f1506c
IMA: use audit_log_untrusted_string rather than %s
by Eric Paris
· 15 years ago
7233e3e
IMA: handle comments in policy
by Eric Paris
· 15 years ago
28ef400
IMA: handle whitespace better
by Eric Paris
· 15 years ago
e9d393b
IMA: reject policies with unknown entries
by Eric Paris
· 15 years ago
Next »