Show patches with: none      |   2302 patches
« 1 2 3 423 24 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[4/4] ima: support fs-verity file digest based signatures ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[3/4] ima: limit including fs-verity's file digest in measurement list ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[2/4] ima: define a new signature type named IMA_VERITY_DIGSIG ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[1/4] fs-verity: define a function to return the integrity protected file digest ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[RFC,v4,3/3] fscrypt: add support for hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-11-16 Eric Biggers New
[RFC,v4,2/3] block: add ioctls to create and prepare hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-11-16 Eric Biggers New
[RFC,v4,1/3] block: add basic hardware-wrapped key support Support for hardware-wrapped inline encryption keys - - - --- 2021-11-16 Eric Biggers New
[RFC,5/5] shmem: Add fsverity support shmem/fsverity: Prepare for mandatory integrity enforcement - - - --- 2021-11-12 Roberto Sassu New
[RFC,4/5] shmem: Avoid segfault in shmem_read_mapping_page_gfp() shmem/fsverity: Prepare for mandatory integrity enforcement - - - --- 2021-11-12 Roberto Sassu New
[RFC,3/5] fsverity: Do initialization earlier shmem/fsverity: Prepare for mandatory integrity enforcement - - - --- 2021-11-12 Roberto Sassu New
[RFC,2/5] fsverity: Revalidate built-in signatures at file open shmem/fsverity: Prepare for mandatory integrity enforcement - - - --- 2021-11-12 Roberto Sassu New
[RFC,1/5] fsverity: Introduce fsverity_get_file_digest() shmem/fsverity: Prepare for mandatory integrity enforcement - - - --- 2021-11-12 Roberto Sassu New
generic/574: remove invalid test of read completely past EOF generic/574: remove invalid test of read completely past EOF - - - --- 2021-11-08 Eric Biggers New
[4/4] soc: qcom: add wrapped key support for ICE Adds wrapped key support for inline storage encryption - - - --- 2021-11-03 Gaurav Kashyap New
[3/4] soc: qcom: add HWKM library for storage encryption Adds wrapped key support for inline storage encryption - - - --- 2021-11-03 Gaurav Kashyap New
[2/4] qcom_scm: scm call for deriving a software secret Adds wrapped key support for inline storage encryption - - - --- 2021-11-03 Gaurav Kashyap New
[1/4] ufs: move ICE functionality to a common library Adds wrapped key support for inline storage encryption - - - --- 2021-11-03 Gaurav Kashyap New
[GIT,PULL] fscrypt updates for 5.16 [GIT,PULL] fscrypt updates for 5.16 - - - --- 2021-10-31 Eric Biggers New
fscrypt: improve a few comments fscrypt: improve a few comments - - - --- 2021-10-26 Eric Biggers New
[RFC,v3,3/3] fscrypt: add support for hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-10-21 Eric Biggers New
[RFC,v3,2/3] block: add ioctls to create and prepare hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-10-21 Eric Biggers New
[RFC,v3,1/3] block: add basic hardware-wrapped key support Support for hardware-wrapped inline encryption keys - - - --- 2021-10-21 Eric Biggers New
[RFC,v7,16/16] documentation: add ipe documentation Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,15/16] ipe: kunit tests Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,14/16] scripts: add boot policy generation program Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,13/16] ipe: enable support for fs-verity as a trust provider Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,12/16] fsverity|security: add security hooks to fsverity digest and signature Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,11/16] ipe: add support for dm-verity as a trust provider Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,10/16] fs|dm-verity: add block_dev LSM blob and submit dm-verity data Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,09/16] ipe: introduce 'boot_verified' as a trust provider Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,08/16] ipe: add permissive toggle Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,07/16] ipe: add auditing support Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,06/16] uapi|audit: add trust audit message definitions Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,05/16] ipe: add LSM hooks on execution and kernel read Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,04/16] ipe: add userspace interface Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,03/16] ipe: add evaluation loop Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,02/16] ipe: add policy parser Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[RFC,v7,01/16] security: add ipe lsm & initial context creation Integrity Policy Enforcement (IPE) - - - --- 2021-10-13 Deven Bowers Not Applicable
[GIT,PULL] fsverity fix for 5.15-rc4 [GIT,PULL] fsverity fix for 5.15-rc4 - - - --- 2021-09-28 Eric Biggers Accepted
[v3] fscrypt: allow 256-bit master keys with AES-256-XTS [v3] fscrypt: allow 256-bit master keys with AES-256-XTS - 1 - --- 2021-09-21 Eric Biggers Accepted
fs-verity: fix signed integer overflow with i_size near S64_MAX fs-verity: fix signed integer overflow with i_size near S64_MAX - 1 - --- 2021-09-16 Eric Biggers Accepted
[RFC,v2,5/5] fscrypt: add support for hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-09-16 Eric Biggers Superseded
[RFC,v2,4/5] fscrypt: allow 256-bit master keys with AES-256-XTS Support for hardware-wrapped inline encryption keys - 1 - --- 2021-09-16 Eric Biggers Superseded
[RFC,v2,3/5] fscrypt: improve documentation for inline encryption Support for hardware-wrapped inline encryption keys - - - --- 2021-09-16 Eric Biggers Accepted
[RFC,v2,2/5] block: add ioctls to create and prepare hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-09-16 Eric Biggers Superseded
[RFC,v2,1/5] block: add basic hardware-wrapped key support Support for hardware-wrapped inline encryption keys - - - --- 2021-09-16 Eric Biggers Superseded
[RFC] fsverity: add enable sysctl [RFC] fsverity: add enable sysctl - - - --- 2021-09-14 Boris Burkov Changes Requested
[v5,4/4] generic: test fs-verity EFBIG scenarios tests for btrfs fsverity - - - --- 2021-09-13 Boris Burkov Not Applicable
[v5,3/4] btrfs: test verity orphans with dmlogwrites tests for btrfs fsverity - - - --- 2021-09-13 Boris Burkov Not Applicable
[v5,2/4] generic/574: corrupt btrfs merkle tree data tests for btrfs fsverity - - - --- 2021-09-13 Boris Burkov Not Applicable
[v5,1/4] btrfs: test btrfs specific fsverity corruption tests for btrfs fsverity - - - --- 2021-09-13 Boris Burkov Not Applicable
[fsverity-utils,v5] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine [fsverity-utils,v5] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine - - - --- 2021-09-09 Aleksander Adamowski Accepted
fscrypt: clean up comments in bio.c fscrypt: clean up comments in bio.c - - - --- 2021-09-09 Eric Biggers Accepted
fscrypt: remove fscrypt_operations::max_namelen fscrypt: remove fscrypt_operations::max_namelen - - - --- 2021-09-09 Eric Biggers Accepted
[fsverity-utils,v4] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine [fsverity-utils,v4] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine - - - --- 2021-09-09 Aleksander Adamowski Superseded
[fsverity-utils,v3] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine [fsverity-utils,v3] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine - - - --- 2021-09-08 Aleksander Adamowski Superseded
[4/4] ubifs: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 4.19 - - - --- 2021-09-08 Eric Biggers Accepted
[3/4] f2fs: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 4.19 - - - --- 2021-09-08 Eric Biggers Accepted
[2/4] ext4: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 4.19 - - - --- 2021-09-08 Eric Biggers Accepted
[1/4] fscrypt: add fscrypt_symlink_getattr() for computing st_size backport fscrypt symlink fixes to 4.19 - - - --- 2021-09-08 Eric Biggers Accepted
[5.10,05/29] ubifs: report correct st_size for encrypted symlinks Untitled series #542521 - - - --- 2021-09-06 Greg Kroah-Hartman Accepted
[5.10,04/29] f2fs: report correct st_size for encrypted symlinks Untitled series #542521 - - - --- 2021-09-06 Greg Kroah-Hartman Accepted
[5.10,03/29] ext4: report correct st_size for encrypted symlinks Untitled series #542521 - - - --- 2021-09-06 Greg Kroah-Hartman Accepted
[5.10,02/29] fscrypt: add fscrypt_symlink_getattr() for computing st_size Untitled series #542521 - - - --- 2021-09-06 Greg Kroah-Hartman Accepted
[5.4,4/4] ubifs: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 5.4 - - - --- 2021-09-01 Eric Biggers Accepted
[5.4,3/4] f2fs: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 5.4 - - - --- 2021-09-01 Eric Biggers Accepted
[5.4,2/4] ext4: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 5.4 - - - --- 2021-09-01 Eric Biggers Accepted
[5.4,1/4] fscrypt: add fscrypt_symlink_getattr() for computing st_size backport fscrypt symlink fixes to 5.4 - - - --- 2021-09-01 Eric Biggers Accepted
[5.10,4/4] ubifs: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 5.10 - - - --- 2021-09-01 Eric Biggers Accepted
[5.10,3/4] f2fs: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 5.10 - - - --- 2021-09-01 Eric Biggers Accepted
[5.10,2/4] ext4: report correct st_size for encrypted symlinks backport fscrypt symlink fixes to 5.10 - - - --- 2021-09-01 Eric Biggers Accepted
[5.10,1/4] fscrypt: add fscrypt_symlink_getattr() for computing st_size backport fscrypt symlink fixes to 5.10 - - - --- 2021-09-01 Eric Biggers Accepted
[GIT,PULL] fscrypt updates for 5.15 [GIT,PULL] fscrypt updates for 5.15 - - - --- 2021-08-30 Eric Biggers Accepted
[fsverity-utils,v2] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine [fsverity-utils,v2] Implement PKCS#11 opaque keys support through OpenSSL pkcs11 engine - - - --- 2021-08-28 Aleksander Adamowski Superseded
[RFC,4/4] fscrypt: add support for hardware-wrapped keys Support for hardware-wrapped inline encryption keys - - - --- 2021-08-28 Eric Biggers Superseded
[RFC,3/4] fscrypt: allow 256-bit master keys with AES-256-XTS Support for hardware-wrapped inline encryption keys - - - --- 2021-08-28 Eric Biggers Superseded
[RFC,2/4] fscrypt: improve documentation for inline encryption Support for hardware-wrapped inline encryption keys - - - --- 2021-08-28 Eric Biggers Superseded
[RFC,1/4] block: add hardware-wrapped key support Support for hardware-wrapped inline encryption keys - - - --- 2021-08-28 Eric Biggers Superseded
[RFC,v8,24/24] ceph: add a new ceph.fscrypt.auth vxattr ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,23/24] ceph: make ceph_get_name decrypt filenames ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,22/24] ceph: create symlinks with encrypted and base64-encoded targets ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,21/24] ceph: add support to readdir for encrypted filenames ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,20/24] ceph: add fscrypt support to ceph_fill_trace ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,19/24] ceph: add helpers for converting names for userland presentation ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,18/24] ceph: make d_revalidate call fscrypt revalidator for encrypted dentries ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,17/24] ceph: properly set DCACHE_NOKEY_NAME flag in lookup ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,16/24] ceph: encode encrypted name in dentry release ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,15/24] ceph: send altname in MClientRequest ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,14/24] ceph: add encrypted fname handling to ceph_mdsc_build_path ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,13/24] ceph: make ceph_msdc_build_path use ref-walk ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,12/24] ceph: decode alternate_name in lease info ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,11/24] ceph: add fscrypt ioctls ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,10/24] ceph: implement -o test_dummy_encryption mount option ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,09/24] ceph: add ability to set fscrypt_auth via setattr ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,08/24] ceph: crypto context handling for ceph ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,07/24] ceph: add fscrypt_* handling to caps.c ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,06/24] ceph: parse new fscrypt_auth and fscrypt_file fields in inode traces ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,05/24] ceph: preallocate inode for ops that may create one ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,04/24] fscrypt: add fscrypt_context_for_new_inode ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
[RFC,v8,03/24] fscrypt: export fscrypt_fname_encrypt and fscrypt_fname_encrypted_size ceph+fscrypt: context, filename and symlink support - - - --- 2021-08-26 Jeff Layton Not Applicable
« 1 2 3 423 24 »