2
0
mirror of https://github.com/edk2-porting/linux-next.git synced 2024-12-16 01:04:08 +08:00
linux-next/security
James Morris 2e884fc975 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity
From: Mimi Zohar <zohar@linux.ibm.com>

Linux 5.0 introduced the platform keyring to allow verifying the IMA
kexec kernel image signature using the pre-boot keys.  This pull
request similarly makes keys on the platform keyring accessible for
verifying the PE kernel image signature.*

Also included in this pull request is a new IMA hook that tags tmp
files, in policy, indicating the file hash needs to be calculated.
 The remaining patches are cleanup.

*Upstream commit "993a110319a4 (x86/kexec: Fix a kexec_file_load()
failure)" is required for testing.
2019-02-14 10:55:42 -08:00
..
apparmor apparmor: Adjust offset when accessing task blob. 2019-01-22 14:38:59 -08:00
integrity evm: Use defined constant for UUID representation 2019-02-04 17:36:01 -05:00
keys encrypted-keys: fix Opt_err/Opt_error = -1 2019-02-04 17:36:01 -05:00
loadpin LoadPin: Initialize as ordered LSM 2019-01-08 13:18:43 -08:00
safesetid LSM: fix return value check in safesetid_init_securityfs() 2019-02-12 10:59:22 -08:00
selinux Linux 5.0-rc3 2019-01-22 14:33:10 -08:00
smack LSM: Make lsm_early_cred() and lsm_early_task() local functions. 2019-01-18 11:44:02 -08:00
tomoyo tomoyo: Allow multiple use_group lines. 2019-01-24 14:50:27 -08:00
yama Linux 5.0-rc3 2019-01-22 14:33:10 -08:00
commoncap.c LSM: generalize flag passing to security_capable 2019-01-10 14:16:06 -08:00
device_cgroup.c docs: fix broken references with multiple hints 2018-06-15 18:10:01 -03:00
inode.c security: fs: make inode explicitly non-modular 2018-12-12 14:58:51 -08:00
Kconfig LSM: add SafeSetID module that gates setid calls 2019-01-25 11:22:45 -08:00
lsm_audit.c audit: use inline function to get audit context 2018-05-14 17:24:18 -04:00
Makefile LSM: add SafeSetID module that gates setid calls 2019-01-25 11:22:45 -08:00
min_addr.c License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
security.c Linux 5.0-rc3 2019-01-22 14:33:10 -08:00