Show patches with: Archived = No       |   768 patches
« 1 2 3 4 … 7 8 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v19,07/20] security: add new securityfs delete function Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
[v19,06/20] ipe: introduce 'boot_verified' as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
[v19,05/20] initramfs|security: Add a security hook to do_populate_rootfs() Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
[v19,04/20] ipe: add LSM hooks on execution and kernel read Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
[v19,03/20] ipe: add evaluation loop Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
[v19,02/20] ipe: add policy parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
[v19,01/20] security: add ipe lsm Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-24 Fan Wu Superseded
fsverity: support block-based Merkle tree caching fsverity: support block-based Merkle tree caching - - - --- 2024-05-15 Eric Biggers Changes Requested
[GIT,PULL] fsverity update for 6.10 [GIT,PULL] fsverity update for 6.10 - - - --- 2024-05-14 Eric Biggers Accepted
[v3,8/8] dm-verity: improve performance by using multibuffer hashing Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,7/8] dm-verity: hash blocks with shash import+finup when possible Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,6/8] fsverity: improve performance by using multibuffer hashing Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,5/8] crypto: arm64/sha256-ce - add support for finup_mb Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,4/8] crypto: x86/sha256-ni - add support for finup_mb Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,3/8] crypto: testmgr - add tests for finup_mb Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,2/8] crypto: testmgr - generate power-of-2 lengths more often Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v3,1/8] crypto: shash - add support for finup_mb Optimize dm-verity and fsverity using multibuffer hashing - - - --- 2024-05-07 Eric Biggers Superseded
[v18,21/21] MAINTAINERS: ipe: add ipe maintainer information Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,20/21] Documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,19/21] ipe: kunit test for parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,18/21] scripts: add boot policy generation program Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,17/21] ipe: enable support for fs-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,16/21] fsverity: expose verified fsverity built-in signatures to LSMs Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,15/21] security: add security_inode_setintegrity() hook Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,14/21] ipe: add support for dm-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,13/21] dm verity: expose root hash digest and signature data to LSMs Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,12/21] dm: add finalize hook to target_type Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,11/21] block,lsm: add LSM blob and new LSM hooks for block device Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,10/21] ipe: add permissive toggle Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,09/21] uapi|audit|ipe: add ipe auditing support Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,08/21] ipe: add userspace interface Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,07/21] security: add new securityfs delete function Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,06/21] ipe: introduce 'boot_verified' as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,05/21] initramfs|security: Add a security hook to do_populate_rootfs() Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,04/21] ipe: add LSM hooks on execution and kernel read Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,03/21] ipe: add evaluation loop Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,02/21] ipe: add policy parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,01/21] security: add ipe lsm Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
fsverity: use register_sysctl_init() to avoid kmemleak warning fsverity: use register_sysctl_init() to avoid kmemleak warning - 1 - --- 2024-05-01 Eric Biggers Accepted
[6/6] common/populate: add verity files to populate xfs images [1/6] common/verity: enable fsverity for XFS - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[5/6] xfs: test disabling fsverity [1/6] common/verity: enable fsverity for XFS - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[4/6] xfs: test xfs_scrub detection and correction of corrupt fsverity metadata [1/6] common/verity: enable fsverity for XFS - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[3/6] xfs/122: adapt to fsverity [1/6] common/verity: enable fsverity for XFS - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[2/6] xfs/{021,122}: adapt to fsverity xattrs [1/6] common/verity: enable fsverity for XFS - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[1/6] common/verity: enable fsverity for XFS [1/6] common/verity: enable fsverity for XFS - 2 - --- 2024-04-30 Darrick J. Wong Changes Requested
[38/38] mkfs.xfs: add verity parameter [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[37/38] xfs_io: create magic command to disable verity [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[36/38] xfs_io: report fsverity status via statx [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[35/38] xfs_spaceman: report data corruption [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[34/38] xfs_scrub: use MADV_POPULATE_READ to check verity files [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[33/38] xfs_scrub: validate verity file contents when doing a media scan [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[32/38] xfs_scrub: check verity file metadata [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[31/38] xfs_repair: allow upgrading filesystems with verity [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[30/38] xfs_repair: handle verity remote attrs [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[29/38] xfs_repair: clear verity iflag when verity isn't supported [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[28/38] xfs_repair: junk fsverity xattrs when unnecessary [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[27/38] xfs_db: compute hashes of merkle tree blocks [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[26/38] xfs_db: dump the inode verity flag [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[25/38] xfs_db: don't obfuscate verity xattrs [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[24/38] xfs_db: dump the verity descriptor [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[23/38] xfs_db: dump merkle tree data [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[22/38] xfs_db: dump verity features and metadata [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[21/38] xfs_db: create hex string as a field type [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[20/38] man: document attr_modify command [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[19/38] xfs_db: make attr_set/remove/modify be able to handle fs-verity attrs [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[18/38] xfs_db: add ATTR_PARENT support to attr_modify command [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[17/38] xfs_db: introduce attr_modify command [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[16/38] libfrog: add fsverity to xfs_report_geom output [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[15/38] xfs: enable ro-compat fs-verity flag [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[14/38] xfs: report verity failures through the health system [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[13/38] xfs: advertise fs-verity being available on filesystem [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[12/38] xfs: use merkle tree offset as attr hash [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[11/38] xfs: add fs-verity support [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[10/38] xfs: add inode on-disk VERITY flag [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[09/38] xfs: add fs-verity ro-compat flag [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[08/38] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[07/38] xfs: add attribute type for fs-verity [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[06/38] xfs: use an empty transaction to protect xfs_attr_get from deadlocks [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[05/38] xfs: minor cleanups of xfs_attr3_rmt_blocks [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[04/38] xfs: create a helper to compute the blockcount of a max sized remote value [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[03/38] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[02/38] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[01/38] fs: add FS_XFLAG_VERITY for verity files [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[26/26] xfs: enable ro-compat fs-verity flag [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[25/26] xfs: make it possible to disable fsverity [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[24/26] xfs: report verity failures through the health system [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[23/26] xfs: teach online repair to evaluate fsverity xattrs [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[22/26] xfs: check and repair the verity inode flag state [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[21/26] xfs: advertise fs-verity being available on filesystem [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[20/26] xfs: add fs-verity ioctls [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[19/26] xfs: don't bother storing merkle tree blocks for zeroed data blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[18/26] xfs: use merkle tree offset as attr hash [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[17/26] xfs: don't store trailing zeroes of merkle tree blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[16/26] xfs: shrink verity blob cache [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[15/26] xfs: create a per-mount shrinker for verity inodes merkle tree blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong Changes Requested
[14/26] xfs: add fs-verity support [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[13/26] xfs: widen flags argument to the xfs_iflags_* helpers [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[12/26] xfs: disable direct read path for fs-verity files [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[11/26] xfs: don't allow to enable DAX on fs-verity sealed inode [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
[10/26] xfs: initialize fs-verity on file open and cleanup on inode destruction [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong Changes Requested
« 1 2 3 4 … 7 8 »