aboutsummaryrefslogtreecommitdiff
path: root/security/integrity/ima/ima_main.c
AgeCommit message (Expand)Author
2017-11-08ima: check signature enforcement against cmdline param instead of CONFIGBruno E. O. Meneguele
2017-11-08ima: fix hash algorithm initializationBoshi Wang
2017-11-08integrity: use kernel_read_file_from_path() to read x509 certsChristoph Hellwig
2017-11-08ima: always measure and audit files in policyMimi Zohar
2017-01-27ima: allow to check MAY_APPENDLans Zhang
2017-01-27ima: fix ima_d_path() possible race with renameMimi Zohar
2016-12-20ima: store the builtin/custom template definitions in a listMimi Zohar
2016-09-16ima: use file_dentry()Miklos Szeredi
2016-06-30ima: change integrity cache to store measured pcrEric Richter
2016-06-30ima: include pcr for each measurement log entryEric Richter
2016-06-30ima: extend ima_get_action() to return the policy pcrEric Richter
2016-05-01ima: add support for creating files using the mknodat syscallMimi Zohar
2016-02-21ima: measure and appraise the IMA policy itselfMimi Zohar
2016-02-21ima: support for kexec image and initramfsMimi Zohar
2016-02-21module: replace copy_module_from_fd with kernel versionMimi Zohar
2016-02-21security: define kernel_read_file hookMimi Zohar
2016-02-21firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar
2016-02-20ima: define a new hook to measure and appraise a file already in memoryMimi Zohar
2016-02-18ima: use "ima_hooks" enum as function argumentMimi Zohar
2016-02-18ima: separate 'security.ima' reading functionality from collectDmitry Kasatkin
2016-01-22wrappers for ->i_mutex accessAl Viro
2015-05-21ima: pass iint to ima_add_violation()Roberto Sassu
2014-10-07ima: use path names cacheDmitry Kasatkin
2014-10-07ima: check ima_policy_flag in the ima_file_free() hookDmitry Kasatkin
2014-09-18ima: detect violations for mmaped filesRoberto Sassu
2014-09-18ima: fix race condition on ima_rdwr_violation_check and process_measurementRoberto Sassu
2014-09-17ima: added ima_policy_flag variableRoberto Sassu
2014-09-17ima: move keyring initialization to ima_init()Dmitry Kasatkin
2014-09-09ima: remove usage of filename parameterDmitry Kasatkin
2014-09-09ima: remove unnecessary extra variableDmitry Kasatkin
2014-09-09ima: simplify conditional statement to improve performanceDmitry Kasatkin
2014-09-09ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin
2014-09-08ima: provide flag to identify new empty filesDmitry Kasatkin
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar
2014-07-17ima: delay template descriptor lookup until useDmitry Kasatkin
2014-07-17ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin
2014-06-12ima: check inode integrity cache in violation checkDmitry Kasatkin
2014-06-12ima: prevent unnecessary policy checkingDmitry Kasatkin
2014-06-03ima: audit log files opened with O_DIRECT flagMimi Zohar
2014-03-07ima: return d_name.name if d_path failsDmitry Kasatkin
2014-03-07integrity: fix checkpatch errorsDmitry Kasatkin
2013-10-31ima: extend the measurement list to include the file signatureMimi Zohar
2013-10-26ima: enable support for larger default filedata hash algorithmsMimi Zohar
2013-10-26ima: defer determining the appraisal hash algorithm for 'ima' templateRoberto Sassu
2013-10-25ima: pass the file descriptor to ima_add_violation()Roberto Sassu
2013-10-25ima: read and use signature hash algorithmDmitry Kasatkin
2013-10-25ima: provide support for arbitrary hash algorithmsDmitry Kasatkin
2013-10-25ima: fix script messagesDmitry Kasatkin
2013-06-29Replace a bunch of file->dentry->d_inode refs with file_inode()David Howells