Show patches with: Submitter = Eric Snowberg       |    State = Action Required       |   158 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[RFC,v2,8/8] clavis: Introduce new LSM called clavis Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,7/8] clavis: Introduce a new key type called clavis_key_acl Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,6/8] keys: Add ability to track intended usage of the public key Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,5/8] keys: Add new verification type (VERIFYING_CLAVIS_SIGNATURE) Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,4/8] clavis: Prevent clavis boot param from changing during kexec Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,3/8] efi: Make clavis boot param persist across kexec Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,2/8] clavis: Introduce a new system keyring called clavis Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
[RFC,v2,1/8] certs: Introduce ability to link to a system key Clavis LSM - - - --- 2024-05-31 Eric Snowberg pcmoore New
integrity: Allow ima_appraise bootparam to be set when SB is enabled integrity: Allow ima_appraise bootparam to be set when SB is enabled - - - --- 2022-04-25 Eric Snowberg New
[7/7] integrity: Use root of trust signature restriction Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[6/7] KEYS: X.509: Flag Intermediate CA certs as built in Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[5/7] KEYS: Introduce sig restriction that validates root of trust Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[4/7] KEYS: Introduce a builtin root of trust key flag Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[3/7] KEYS: X.509: Parse Key Usage Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[2/7] KEYS: X.509: Parse Basic Constraints for CA Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[1/7] KEYS: Create static version of public_key_verify_signature Add CA enforcement keyring restrictions - 1 - --- 2022-04-06 Eric Snowberg New
[4/4] integrity: CA enforcement in machine keyring Add CA enforcement in the machine keyring - - - --- 2022-03-01 Eric Snowberg New
[3/4] KEYS: CA link restriction Add CA enforcement in the machine keyring - - - --- 2022-03-01 Eric Snowberg New
[2/4] X.509: Parse Basic Constraints for CA Add CA enforcement in the machine keyring - - - --- 2022-03-01 Eric Snowberg New
[1/4] KEYS: Create static version of public_key_verify_signature Add CA enforcement in the machine keyring - 1 - --- 2022-03-01 Eric Snowberg New
[v10,8/8] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - 1 - --- 2022-01-26 Eric Snowberg New
[v10,7/8] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - 1 - --- 2022-01-26 Eric Snowberg New
[v10,6/8] efi/mokvar: move up init order Enroll kernel keys thru MOK - 1 - --- 2022-01-26 Eric Snowberg New
[v10,5/8] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - 1 1 --- 2022-01-26 Eric Snowberg New
[v10,4/8] KEYS: store reference to machine keyring Enroll kernel keys thru MOK - 1 1 --- 2022-01-26 Eric Snowberg New
[v10,3/8] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - 2 1 --- 2022-01-26 Eric Snowberg New
[v10,2/8] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - - 2 --- 2022-01-26 Eric Snowberg New
[v10,1/8] integrity: Fix warning about missing prototypes Enroll kernel keys thru MOK - 2 1 --- 2022-01-26 Eric Snowberg New
[v9,8/8] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - 1 - --- 2022-01-05 Eric Snowberg New
[v9,7/8] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - 1 - --- 2022-01-05 Eric Snowberg New
[v9,6/8] efi/mokvar: move up init order Enroll kernel keys thru MOK - 1 - --- 2022-01-05 Eric Snowberg New
[v9,5/8] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - 1 - --- 2022-01-05 Eric Snowberg New
[v9,4/8] KEYS: store reference to machine keyring Enroll kernel keys thru MOK - 1 - --- 2022-01-05 Eric Snowberg New
[v9,3/8] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - 2 - --- 2022-01-05 Eric Snowberg New
[v9,2/8] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - - 1 --- 2022-01-05 Eric Snowberg New
[v9,1/8] integrity: Fix warning about missing prototypes Enroll kernel keys thru MOK - 2 - --- 2022-01-05 Eric Snowberg New
[v8,17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,16/17] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,15/17] efi/mokvar: move up init order Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,14/17] KEYS: link machine trusted keys to secondary_trusted_keys Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,13/17] integrity: store reference to machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,12/17] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,11/17] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,10/17] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,09/17] KEYS: Rename get_builtin_and_secondary_restriction Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,08/17] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,07/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,06/17] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-11-24 Eric Snowberg New
[v8,05/17] X.509: Parse Basic Constraints for CA Enroll kernel keys thru MOK - - - --- 2021-11-24 Eric Snowberg New
[v8,04/17] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,03/17] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - 2 - --- 2021-11-24 Eric Snowberg New
[v8,02/17] integrity: Fix warning about missing prototypes Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v8,01/17] KEYS: Create static version of public_key_verify_signature Enroll kernel keys thru MOK - 1 - --- 2021-11-24 Eric Snowberg New
[v7,17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,16/17] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,15/17] efi/mokvar: move up init order Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,14/17] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,13/17] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,12/17] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,11/17] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,10/17] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,09/17] KEYS: Rename get_builtin_and_secondary_restriction Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,08/17] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,07/17] integrity: Fix warning about missing prototypes Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,06/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,05/17] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,04/17] X.509: Parse Basic Constraints for CA Enroll kernel keys thru MOK - - - --- 2021-11-16 Eric Snowberg New
[v7,03/17] KEYS: Create static version of public_key_verify_signature Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,02/17] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v7,01/17] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - 1 - --- 2021-11-16 Eric Snowberg New
[v6,13/13] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,12/13] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,11/13] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,10/13] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,09/13] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,08/13] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,07/13] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,06/13] KEYS: Rename get_builtin_and_secondary_restriction Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,05/13] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,04/13] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,03/13] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,02/13] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,01/13] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v5,12/12] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,11/12] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,10/12] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,09/12] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,08/12] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,07/12] KEYS: Introduce link restriction to include builtin, secondary and machine keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,06/12] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,05/12] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,04/12] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,03/12] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,02/12] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,01/12] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - 1 - --- 2021-09-07 Eric Snowberg New
[v4,12/12] integrity: Only use mok keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,11/12] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,10/12] integrity: store reference to mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,09/12] KEYS: link secondary_trusted_keys to mok trusted keys Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,08/12] KEYS: integrity: change link restriction to trust the mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
« 1 2 »