Show patches with: none      |   9111 patches
« 1 2 ... 31 32 3391 92 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[RFC,v2,07/19] ima: Move ima_htable into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[RFC,v2,06/19] ima: Move policy related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[RFC,v2,05/19] ima: Move IMA's keys queue related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[RFC,v2,04/19] ima: Move delayed work queue and variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[RFC,v2,03/19] ima: Namespace audit status flags ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[RFC,v2,02/19] ima: Define ns_status for storing namespaced iint data ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[RFC,v2,01/19] ima: Add IMA namespace support ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-12-03 Stefan Berger New
[v1,5/5] fsverity: update the documentation ima: support fs-verity signatures stored as - - - --- 2021-12-02 Mimi Zohar New
[v1,4/5] ima: support fs-verity file digest based signatures ima: support fs-verity signatures stored as - - - --- 2021-12-02 Mimi Zohar New
[v1,3/5] ima: limit including fs-verity's file digest in measurement list ima: support fs-verity signatures stored as - - - --- 2021-12-02 Mimi Zohar New
[v1,2/5] ima: define a new signature type named IMA_VERITY_DIGSIG ima: support fs-verity signatures stored as - - - --- 2021-12-02 Mimi Zohar New
[v1,1/5] fs-verity: define a function to return the integrity protected file digest ima: support fs-verity signatures stored as - - - --- 2021-12-02 Mimi Zohar New
[v2] char: tpm: cr50: Set TPM_FIRMWARE_POWER_MANAGED based on device property [v2] char: tpm: cr50: Set TPM_FIRMWARE_POWER_MANAGED based on device property - - - --- 2021-12-02 Rob Barnes New
[RFC] device mapper: Add builtin function dm_get_status() [RFC] device mapper: Add builtin function dm_get_status() - - - --- 2021-12-01 Roberto Sassu New
[RFC,v2,3/3] ima: make the integrity inode cache per namespace Namespace IMA log entries - - - --- 2021-12-01 James Bottomley New
[RFC,v2,2/3] ima: show the namespace label in the ima-ns template Namespace IMA log entries - - - --- 2021-12-01 James Bottomley New
[RFC,v2,1/3] userns: add ima_ns_info field containing a settable namespace label Namespace IMA log entries - - - --- 2021-12-01 James Bottomley New
[v4] KEYS: trusted: Fix trusted key backends when building as module [v4] KEYS: trusted: Fix trusted key backends when building as module - 3 1 --- 2021-12-01 Ahmad Fatoum New
char: tpm: cr50: Set TPM_FIRMWARE_POWER_MANAGED based on device property char: tpm: cr50: Set TPM_FIRMWARE_POWER_MANAGED based on device property - - - --- 2021-11-30 Rob Barnes New
[RFC,20/20] ima: Setup securityfs_ns for IMA namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,19/20] ima/userns: Define early teardown function for IMA namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,18/20] userns: Introduce a refcount variable for calling early teardown function ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,17/20] ima: Use integrity_admin_ns_capable() to check corresponding capability ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,16/20] ima: Use ns_capable() for namespace policy access ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,15/20] capabilities: Introduce CAP_INTEGRITY_ADMIN ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,14/20] ima: Move some IMA policy and filesystem related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,13/20] securityfs: Build securityfs_ns for namespacing support ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,12/20] securityfs: Pass static variables as parameters from top level functions ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,11/20] securityfs: Prefix global variables with securityfs_ ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,10/20] ima: Implement hierarchical processing of file accesses ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,09/20] ima: Only accept AUDIT rules for IMA non-init_ima_ns namespaces for now ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,08/20] ima: Move measurement list related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,07/20] ima: Move ima_htable into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,06/20] ima: Move policy related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,05/20] ima: Move IMA's keys queue related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,04/20] ima: Move delayed work queue and variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,03/20] ima: Namespace audit status flags ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,02/20] ima: Define ns_status for storing namespaced iint data ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[RFC,01/20] ima: Add IMA namespace support ima: Namespace IMA with audit support in IMA-ns - - - --- 2021-11-30 Stefan Berger New
[4/4] ima: support fs-verity file digest based signatures ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[3/4] ima: limit including fs-verity's file digest in measurement list ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[2/4] ima: define a new signature type named IMA_VERITY_DIGSIG ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
[1/4] fs-verity: define a function to return the integrity protected file digest ima: support fs-verity signatures stored as - - - --- 2021-11-29 Mimi Zohar New
fix iint inode add race resulting in duplication of iint entries fix iint inode add race resulting in duplication of iint entries - - - --- 2021-11-29 James Bottomley New
[v4,2/2] selftests: tpm2: Reset the dictionary attack lock selftests: tpm2: Determine available PCR bank - - - --- 2021-11-28 Stefan Berger New
[v4,1/2] selftests: tpm2: Determine available PCR bank selftests: tpm2: Determine available PCR bank 1 - 1 --- 2021-11-28 Stefan Berger New
tpm: make const pointer desc a static const array tpm: make const pointer desc a static const array - - - --- 2021-11-27 Colin Ian King New
[RFC,3/3] ima: make the integrity inode cache per namespace Namespace IMA - - - --- 2021-11-27 James Bottomley New
[RFC,2/3] ima: Namespace IMA Namespace IMA 1 - - --- 2021-11-27 James Bottomley New
[RFC,1/3] userns: add uuid field Namespace IMA - - - --- 2021-11-27 James Bottomley New
[v2,6/6] module: Move duplicate mod_check_sig users code to mod_parse_sig KEXEC_SIG with appended signature - - - --- 2021-11-25 Michal Suchánek New
[v2,5/6] module: Use key_being_used_for for log messages in verify_appended_signature KEXEC_SIG with appended signature - - - --- 2021-11-25 Michal Suchánek New
[v2,4/6] module: strip the signature marker in the verification function. KEXEC_SIG with appended signature - - - --- 2021-11-25 Michal Suchánek New
[v2,3/6] kexec_file: Don't opencode appended signature verification. KEXEC_SIG with appended signature - - - --- 2021-11-25 Michal Suchánek New
[v2,2/6] powerpc/kexec_file: Add KEXEC_SIG support. KEXEC_SIG with appended signature - - - --- 2021-11-25 Michal Suchánek New
[v2,1/6] s390/kexec_file: Don't opencode appended signature check. KEXEC_SIG with appended signature - - - --- 2021-11-25 Michal Suchánek New
[v3,3/3] selftests: tpm2: Add support for SHA-384 and SHA-512 selftests: tpm2: Probe for available PCR bank - - - --- 2021-11-25 Stefan Berger New
[v3,2/3] selftests: tpm2: Reset the dictionary attack lock selftests: tpm2: Probe for available PCR bank - - - --- 2021-11-25 Stefan Berger New
[v3,1/3] selftests: tpm2: Probe for available PCR bank selftests: tpm2: Probe for available PCR bank - - - --- 2021-11-25 Stefan Berger New
ima: Fix trivial typos in the comments ima: Fix trivial typos in the comments - 1 - --- 2021-11-24 Austin Kim New
[v5,2/2] integrity: support including firmware ".platform" keys at build time integrity: support including firmware ".platform" keys at build time - 1 - --- 2021-11-24 Nayna Jain New
[v5,1/2] certs: export load_certificate_list() to be used outside certs/ integrity: support including firmware ".platform" keys at build time - 1 - --- 2021-11-24 Nayna Jain New
security:trusted_tpm2: Fix memory leak in tpm2_key_encode() security:trusted_tpm2: Fix memory leak in tpm2_key_encode() - - - --- 2021-11-24 Jianglei Nie New
[v2,3/3] selftests: tpm2: Add support for SHA-384 and SHA-512 selftests: tpm2: Probe for available PCR bank - - - --- 2021-11-24 Stefan Berger New
[v2,2/3] selftests: tpm2: Reset the dictionary attack lock selftests: tpm2: Probe for available PCR bank - - - --- 2021-11-24 Stefan Berger New
[v2,1/3] selftests: tpm2: Probe for available PCR bank selftests: tpm2: Probe for available PCR bank - - - --- 2021-11-24 Stefan Berger New
[3/3] Add tests to verify kexec of blacklist and non blacklist kernel [1/3] selftest/kexec: fix "ignored null byte in input" warning - - - --- 2021-11-24 R Nageswara Sastry New
[2/3] selftests/kexec: Enable secureboot tests for PowerPC [1/3] selftest/kexec: fix "ignored null byte in input" warning - 1 1 --- 2021-11-24 R Nageswara Sastry New
[1/3] selftest/kexec: fix "ignored null byte in input" warning [1/3] selftest/kexec: fix "ignored null byte in input" warning - - - --- 2021-11-24 R Nageswara Sastry New
[v8,17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,16/17] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,15/17] efi/mokvar: move up init order Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,14/17] KEYS: link machine trusted keys to secondary_trusted_keys Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,13/17] integrity: store reference to machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,12/17] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,11/17] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,10/17] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,09/17] KEYS: Rename get_builtin_and_secondary_restriction Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,08/17] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,07/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,06/17] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-11-24 Eric Snowberg New
[v8,05/17] X.509: Parse Basic Constraints for CA Enroll kernel keys thru MOK - - - --- 2021-11-24 Eric Snowberg New
[v8,04/17] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,03/17] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - 2 - --- 2021-11-24 Eric Snowberg New
[v8,02/17] integrity: Fix warning about missing prototypes Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,01/17] KEYS: Create static version of public_key_verify_signature Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v30,15/28] LSM: Ensure the correct LSM context releaser Untitled series #584927 3 2 - --- 2021-11-24 Casey Schaufler New
[v30,13/28] LSM: Use lsmblob in security_cred_getsecid Untitled series #584927 2 2 - --- 2021-11-24 Casey Schaufler New
[v30,12/28] LSM: Use lsmblob in security_inode_getsecid Untitled series #584927 2 2 - --- 2021-11-24 Casey Schaufler New
[v30,11/28] LSM: Use lsmblob in security_task_getsecid Untitled series #584927 2 2 - --- 2021-11-24 Casey Schaufler New
[2/2] selftests: tpm2: Reset the dictionary attack lock selftests: tpm2: Probe for available PCR bank - - 1 --- 2021-11-22 Stefan Berger New
[1/2] selftests: tpm: Probe for available PCR bank selftests: tpm2: Probe for available PCR bank - - 1 --- 2021-11-22 Stefan Berger New
[v7,17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,16/17] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,15/17] efi/mokvar: move up init order Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,14/17] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,13/17] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,12/17] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,11/17] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,10/17] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
« 1 2 ... 31 32 3391 92 »