[GIT,PULL] linux-integrity patches for Linux 4.20

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-

Message

Mimi Zohar Oct. 11, 2018, 7:33 p.m. UTC

Hi James,

Sorry for the delay.  This pull request contains a couple of bug
fixes, including one for a recent problem with calculating file hashes
on overlayfs, and some code cleanup.

Mimi

The following changes since commit
e6123c524064a571616ec978b1317f1696eff0ae:

  security: fix LSM description location (2018-10-09 12:18:38 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-
integrity.git next-integrity

for you to fetch changes up to
34bccd61b139dbb452421aebf480e7af5f7a12ed:

  MAINTAINERS: add Jarkko as maintainer for trusted keys (2018-10-11
12:10:16 -0400)

----------------------------------------------------------------
Eric Biggers (4):
      vfs: require i_size <= SIZE_MAX in kernel_read_file()
      security/integrity: constify some read-only data
      security/integrity: remove unnecessary 'init_keyring' variable
      ima: fix showing large 'violations' or
'runtime_measurements_count'

Goldwyn Rodrigues (1):
      ima: open a new file instance if no read permissions

Mimi Zohar (1):
      MAINTAINERS: add Jarkko as maintainer for trusted keys

 MAINTAINERS                           |  1 +
 fs/exec.c                             |  8 +++---
 security/integrity/digsig.c           | 10 ++-----
 security/integrity/evm/evm_crypto.c   |  4 +--
 security/integrity/ima/ima.h          |  2 +-
 security/integrity/ima/ima_api.c      |  3 +-
 security/integrity/ima/ima_crypto.c   | 54 ++++++++++++++++++++++--
-----------
 security/integrity/ima/ima_fs.c       |  9 +++---
 security/integrity/ima/ima_init.c     |  2 +-
 security/integrity/ima/ima_main.c     |  2 +-
 security/integrity/ima/ima_template.c | 11 +++----
 11 files changed, 59 insertions(+), 47 deletions(-)

Comments

James Morris Oct. 15, 2018, 5:40 p.m. UTC | #1

On Thu, 11 Oct 2018, Mimi Zohar wrote:

> Hi James,
> 
> Sorry for the delay.  This pull request contains a couple of bug
> fixes, including one for a recent problem with calculating file hashes
> on overlayfs, and some code cleanup.

Thanks, pulled to next-integrity and next-testing.