Show patches with: Submitter = Mimi Zohar       |   91 patches
Patch Series A/R/T S/W/F Date Submitter Delegate State
ima: define a new policy condition based on the filesystem name - - - --- 2018-04-30 Mimi Zohar New
[v3,4/4] fuse: define the filesystem as untrusted 2 - - --- 2018-03-08 Mimi Zohar New
[v3,3/4] ima: fail signature verification based on policy 2 - - --- 2018-03-08 Mimi Zohar New
[v3,2/4] ima: re-evaluate files on privileged mounted filesystems 2 - - --- 2018-03-08 Mimi Zohar New
[v3,1/4] ima: fail file signature verification on non-init mounted filesystems 2 - - --- 2018-03-08 Mimi Zohar New
[v2,4/4] fuse: define the filesystem as untrusted - - - --- 2018-02-22 Mimi Zohar New
[v2,3/4] ima: fail signature verification based on policy - - - --- 2018-02-22 Mimi Zohar New
[v2,2/4] ima: re-evaluate files on privileged mounted filesystems - - - --- 2018-02-22 Mimi Zohar New
[v2,1/4] ima: fail file signature verification on non-init mounted filesystems - - - --- 2018-02-22 Mimi Zohar New
[v1,2/2] fuse: define the filesystem as untrusted - - - --- 2018-02-19 Mimi Zohar New
[v1,1/2] ima: fail signature verification on untrusted filesystems - - - --- 2018-02-19 Mimi Zohar New
[RFC,4/4] fuse: define the filesystem as untrusted - - - --- 2018-02-14 Mimi Zohar New
[RFC,3/4] ima: define a new policy option named "fail" - - - --- 2018-02-14 Mimi Zohar New
[RFC,2/4] ima: fail signature verification on unprivileged & untrusted filesystems 1 - - --- 2018-02-14 Mimi Zohar New
[RFC,1/4] ima: define a new policy condition based on the filesystem name - - - --- 2018-02-14 Mimi Zohar New
[RFC] ima: force the re-evaluation of files on untrusted file systems - - - --- 2018-02-05 Mimi Zohar New
ima: define new policy condition based on the filesystem name - - - --- 2018-01-15 Mimi Zohar New
[RFC,v2] fw_lockdown: new micro LSM module to prevent loading unsigned firmware - - - --- 2017-11-13 Mimi Zohar New
[RFC,v1] fw_lockdown: new micro LSM module to prevent loading unsigned firmware - - - --- 2017-11-10 Mimi Zohar New
[RFC] fw_lockdown: new micro LSM module to prevent loading unsigned firmware - - - --- 2017-11-10 Mimi Zohar New
vfs: fix mounting a filesystem with i_version - - - --- 2017-10-08 Mimi Zohar New
[RFC,3/3] fs: detect that the i_rwsem has already been taken exclusively - - - --- 2017-09-28 Mimi Zohar New
[RFC,2/3] integrity: use call_read_iter to calculate the file hash - - - --- 2017-09-28 Mimi Zohar New
[RFC,1/3] fs: define new read_iter rwf flag - - - --- 2017-09-28 Mimi Zohar New
[RFC,4/4] ima: define a new ima_sb_post_remount hook - - - --- 2017-08-16 Mimi Zohar New
[RFC,3/4] security: define a new LSM sb_post_remount hook - - - --- 2017-08-16 Mimi Zohar New
[RFC,2/4] ima: define new ima_sb_post_new_mount hook - 1 - --- 2017-08-16 Mimi Zohar New
[RFC,1/4] security: define new LSM sb_post_new_mount hook - - - --- 2017-08-16 Mimi Zohar New
[v6,6/6] ima: define "fs_unsafe" builtin policy - - - --- 2017-08-15 Mimi Zohar New
[v6,5/6] ima: define "dont_failsafe" policy action rule - - - --- 2017-08-15 Mimi Zohar New
[v6,4/6] ima: use fs method to read integrity data - 1 - --- 2017-08-15 Mimi Zohar New
[v6,3/6] ima: always measure and audit files in policy - - - --- 2017-08-15 Mimi Zohar New
[v6,2/6] efivarfs: replaces the read file operation with read_iter - 1 - --- 2017-08-15 Mimi Zohar New
[v6,1/6] libfs: define simple_read_iter_from_buffer - 1 - --- 2017-08-15 Mimi Zohar New
[v5,4/4] ima: define "fs_unsafe" builtin policy - - - --- 2017-08-10 Mimi Zohar New
[v5,3/4] ima: define "dont_failsafe" policy action rule - - - --- 2017-08-10 Mimi Zohar New
[v5,2/4] ima: use fs method to read integrity data - - - --- 2017-08-10 Mimi Zohar New
[v5,1/4] ima: always measure and audit files in policy - - - --- 2017-08-10 Mimi Zohar New
[v4,2/5] ima: use fs method to read integrity data [updated] - - - --- 2017-08-01 Mimi Zohar New
[v4,5/5] ima: remove permit_directio policy option - - - --- 2017-07-26 Mimi Zohar New
[v4,4/5] ima: define "fs_unsafe" builtin policy - - - --- 2017-07-26 Mimi Zohar New
[v4,3/5] ima: define "dont_failsafe" policy action rule - - - --- 2017-07-26 Mimi Zohar New
[v4,2/5] ima: use fs method to read integrity data - - - --- 2017-07-26 Mimi Zohar New
[v4,1/5] ima: always measure and audit files in policy - - - --- 2017-07-26 Mimi Zohar New
[v3,4/4] ima: define "fs_unsafe" builtin policy - - - --- 2017-07-13 Mimi Zohar New
[v3,3/4] ima: define "dont_failsafe" policy action rule - - - --- 2017-07-13 Mimi Zohar New
[v3,2/4] ima: use fs method to read integrity data - - - --- 2017-07-13 Mimi Zohar New
[v3,1/4] ima: always measure and audit files in policy - - - --- 2017-07-13 Mimi Zohar New
[RFC,v1] efivarfs: define integrity_read method - - - --- 2017-07-06 Mimi Zohar New
[RFC] efivarfs: define integrity_read method - - - --- 2017-07-06 Mimi Zohar New
[v2,10/10] ima: use existing read file operation method to calculate file hash - - - --- 2017-06-21 Mimi Zohar New
[v2,09/10] ubifs: define integrity_read method - - - --- 2017-06-21 Mimi Zohar New
[v2,08/10] jffs2: define integrity_read method - - - --- 2017-06-21 Mimi Zohar New
[v2,07/10] ocfs2: define integrity_read method - - - --- 2017-06-21 Mimi Zohar New
[v2,06/10] fs: define integrity_read method for ext2, gfs2, f2fs, jfs, ramfs - - - --- 2017-06-21 Mimi Zohar New
[v2,05/10] tmpfs: define integrity_read method - - - --- 2017-06-21 Mimi Zohar New
[v2,04/10] ima: define "fs_unsafe" builtin policy - - - --- 2017-06-21 Mimi Zohar New
[v2,03/10] ima: define "dont_failsafe" policy action rule - - - --- 2017-06-21 Mimi Zohar New
[v2,02/10] ima: use fs method to read integrity data - - - --- 2017-06-21 Mimi Zohar New
[v2,01/10] ima: always measure and audit files in policy - - - --- 2017-06-21 Mimi Zohar New
sample xfstests IMA-appraisal test module (resending) - - - --- 2017-06-09 Mimi Zohar New
[4/4] ima: use read_iter (generic_file_read_iter) to calculate file hash - - - --- 2017-06-09 Mimi Zohar New
[3/4] ima: use existing read file operation method to calculate file hash - - - --- 2017-06-09 Mimi Zohar New
[2/4] tmpfs: define integrity_read file operation method - - - --- 2017-06-09 Mimi Zohar New
[1/4] ima: use fs method to read integrity data - - - --- 2017-06-09 Mimi Zohar New
[RFC] tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver - - - --- 2017-03-07 Mimi Zohar New
[RFC] tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver - 2 - --- 2017-02-23 Mimi Zohar New
[v2] fs: define a string representation of the kernel_read_file_id enumeration - - - --- 2016-04-18 Mimi Zohar New
[v2,2/2] ima: add support for creating files using the mknodat syscall - - 1 --- 2016-03-15 Mimi Zohar New
[v2,1/2] ima: fix ima_inode_post_setattr - - 1 --- 2016-03-15 Mimi Zohar New
vfs: forbid write access when reading a file into memory 1 1 - --- 2016-02-19 Mimi Zohar New
vfs: forbid write access when reading a file into memory 1 1 - --- 2016-02-16 Mimi Zohar New
[v4,19/19] ima: require signed IMA policy 2 - - --- 2016-02-12 Mimi Zohar New
[v4,18/19] ima: measure and appraise the IMA policy itself 2 - - --- 2016-02-12 Mimi Zohar New
[v4,17/19] ima: load policy using path - - - --- 2016-02-12 Mimi Zohar New
[v4,16/19] ima: support for kexec image and initramfs 2 - - --- 2016-02-12 Mimi Zohar New
[v4,15/19] kexec: replace call to copy_file_from_fd() with kernel version 3 - - --- 2016-02-12 Mimi Zohar New
[v4,14/19] ima: remove firmware and module specific cached status info 2 - - --- 2016-02-12 Mimi Zohar New
[v4,13/19] module: replace copy_module_from_fd with kernel version 2 - - --- 2016-02-12 Mimi Zohar New
[v4,12/19] vfs: define kernel_copy_file_from_fd() 2 - - --- 2016-02-12 Mimi Zohar New
[v4,11/19] security: define kernel_read_file hook 3 - - --- 2016-02-12 Mimi Zohar New
[v4,10/19] firmware: replace call to fw_read_file_contents() with kernel version 2 - - --- 2016-02-12 Mimi Zohar New
[v4,09/19] vfs: define kernel_read_file_from_path 2 - - --- 2016-02-12 Mimi Zohar New
[v4,08/19] ima: define a new hook to measure and appraise a file already in memory 1 - - --- 2016-02-12 Mimi Zohar New
[v4,07/19] ima: calculate the hash of a buffer using aynchronous hash(ahash) 1 - - --- 2016-02-12 Mimi Zohar New
[v4,06/19] ima: provide buffer hash calculation function - - - --- 2016-02-12 Mimi Zohar New
[v4,05/19] vfs: define kernel_read_file_id enumeration 2 - - --- 2016-02-12 Mimi Zohar New
[v4,04/19] vfs: define a generic function to read a file from the kernel 1 1 - --- 2016-02-12 Mimi Zohar New
[v4,03/19] firmware: clean up filesystem load exit path 1 - - --- 2016-02-12 Mimi Zohar New
[v4,02/19] firmware: move completing fw into a helper 1 1 - --- 2016-02-12 Mimi Zohar New
[v4,01/19] firmware: simplify dev_*() print messages for generic helpers 1 - - --- 2016-02-12 Mimi Zohar New