Linus Torvalds 6c1dd1fe5d integrity-v6.8 ... -----BEGIN PGP SIGNATURE----- iIoEABYIADIWIQQdXVVFGN5XqKr1Hj7LwZzRsCrn5QUCZZ0pVhQcem9oYXJAbGlu dXguaWJtLmNvbQAKCRDLwZzRsCrn5RVMAQDm9J+iiY/2Af75vOTKIZXtGF6KsBpx 9b9ALPqPNZPgugD+PfwSbS+6rO8AItXE0Q2+FwtDaV8LxgSwK9vGeCHI2wM= =yinc -----END PGP SIGNATURE----- Merge tag 'integrity-v6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity Pull integrity updates from Mimi Zohar: - Add a new IMA/EVM maintainer and reviewer - Disable EVM on overlayfs The EVM HMAC and the original file signatures contain filesystem specific metadata (e.g. i_ino, i_generation and s_uuid), preventing the security.evm xattr from directly being copied up to the overlay. Further before calculating and writing out the overlay file's EVM HMAC, EVM must first verify the existing backing file's 'security.evm' value. For now until a solution is developed, disable EVM on overlayfs. - One bug fix and two cleanups * tag 'integrity-v6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity: overlay: disable EVM evm: add support to disable EVM on unsupported filesystems evm: don't copy up 'security.evm' xattr MAINTAINERS: Add Eric Snowberg as a reviewer to IMA MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM KEYS: encrypted: Add check for strsep ima: Remove EXPERIMENTAL from Kconfig ima: Reword IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY		2024-01-09 13:24:06 -08:00
..
encrypted-keys	KEYS: encrypted: Add check for strsep	2023-11-27 12:44:47 -05:00
trusted-keys	KEYS: trusted: tee: Refactor register SHM usage	2023-10-24 03:06:35 +03:00
big_key.c	big_keys: Use struct for internal payload	2022-05-16 16:02:21 -07:00
compat_dh.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
compat.c	security/keys: remove compat_keyctl_instantiate_key_iov	2020-10-03 00:02:16 -04:00
dh.c	KEYS: DH: Use crypto_wait_req	2023-02-13 18:34:48 +08:00
gc.c	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2023-12-21 13:47:38 +00:00
internal.h	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2023-12-21 13:47:38 +00:00
Kconfig	KEYS: trusted: allow use of TEE as backend without TCG_TPM support	2022-05-23 18:47:50 +03:00
key.c	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2023-12-21 13:47:38 +00:00
keyctl_pkey.c	KEYS: fix length validation in keyctl_pkey_params_get_2()	2022-03-08 10:33:18 +02:00
keyctl.c	iov_iter: replace import_single_range() with import_ubuf()	2023-12-05 11:57:37 +01:00
keyring.c	security/keys: Remove inconsistent __user annotation	2022-10-05 00:25:56 +03:00
Makefile	KEYS: remove CONFIG_KEYS_COMPAT	2019-12-12 23:41:17 +02:00
permission.c	keys: Make the KEY_NEED_* perms an enum rather than a mask	2020-05-19 15:42:22 +01:00
persistent.c	Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"	2019-07-10 18:43:43 -07:00
proc.c	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2023-12-21 13:47:38 +00:00
process_keys.c	ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring	2021-10-20 10:34:20 -05:00
request_key_auth.c	KEYS: Replace all non-returning strlcpy with strscpy	2023-08-17 20:12:35 +00:00
request_key.c	keys: Fix linking a duplicate key to a keyring's assoc_array	2023-07-17 19:32:30 +00:00
sysctl.c	sysctl: set variable key_sysctls storage-class-specifier to static	2023-08-07 17:55:54 +00:00
user_defined.c	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00