Linux Integrity
[Prev Page][Next Page]
- [PATCH 0/4] Tegra TPM driver with hw flow control,
Krishna Yarlagadda
- [PATCH ima-evm-utils v4] Add tests for MMAP_CHECK and MMAP_CHECK_REQPROT hooks,
Roberto Sassu
- [regression] Bug 216989 - since 6.1 systems with AMD Ryzen stutter when fTPM is enabled,
Linux kernel regression tracking (Thorsten Leemhuis)
- [PATCH ima-evm-utils v3] Add tests for MMAP_CHECK and MMAP_CHECK_REQPROT hooks, Roberto Sassu
- [PATCH v4 1/2] ima: Align ima_file_mmap() parameters with mmap_file LSM hook,
Roberto Sassu
- [PATCH ima-evm-utils] Fix reading the TPM 2.0 PCRs, Mimi Zohar
- [PATCH] Fix reading the TPM 2.0 PCRs,
Mimi Zohar
- [PATCH ima-evm-utils v2] Introduce expect_pass_if() and expect_fail_if(), Roberto Sassu
- [PATCH ima-evm-utils] Introduce expect_pass_if() and expect_fail_if(),
Roberto Sassu
- [PATCH v5 00/25] pSeries dynamic secure boot secvar interface + platform keyring loading,
Andrew Donnellan
- [PATCH v5 03/25] powerpc/secvar: Fix incorrect return in secvar_sysfs_load(), Andrew Donnellan
- [PATCH v5 24/25] integrity/powerpc: Improve error handling & reporting when loading certs, Andrew Donnellan
- [PATCH v5 01/25] powerpc/pseries: Fix handling of PLPKS object flushing timeout, Andrew Donnellan
- [PATCH v5 09/25] powerpc/secvar: Clean up init error messages, Andrew Donnellan
- [PATCH v5 21/25] powerpc/pseries: Add helper to get PLPKS password length, Andrew Donnellan
- [PATCH v5 04/25] powerpc/secvar: Use u64 in secvar_operations, Andrew Donnellan
- [PATCH v5 23/25] powerpc/pseries: Implement secvars for dynamic secure boot, Andrew Donnellan
- [PATCH v5 10/25] powerpc/secvar: Extend sysfs to include config vars, Andrew Donnellan
- [PATCH v5 20/25] powerpc/pseries: Turn PSERIES_PLPKS into a hidden option, Andrew Donnellan
- [PATCH v5 13/25] powerpc/secvar: Don't print error on ENOENT when reading variables, Andrew Donnellan
- [PATCH v5 14/25] powerpc/pseries: Move plpks.h to include directory, Andrew Donnellan
- [PATCH v5 02/25] powerpc/pseries: Fix alignment of PLPKS structures and buffers, Andrew Donnellan
- [PATCH v5 06/25] powerpc/secvar: Use sysfs_emit() instead of sprintf(), Andrew Donnellan
- [PATCH v5 18/25] powerpc/pseries: Log hcall return codes for PLPKS debug, Andrew Donnellan
- [PATCH v5 17/25] powerpc/pseries: Implement signed update for PLPKS objects, Andrew Donnellan
- [PATCH v5 15/25] powerpc/pseries: Move PLPKS constants to header file, Andrew Donnellan
- [PATCH v5 22/25] powerpc/pseries: Pass PLPKS password on kexec, Andrew Donnellan
- [PATCH v5 25/25] integrity/powerpc: Support loading keys from PLPKS, Andrew Donnellan
- [PATCH v5 16/25] powerpc/pseries: Expose PLPKS config values, support additional fields, Andrew Donnellan
- [PATCH v5 11/25] powerpc/secvar: Allow backend to populate static list of variable names, Andrew Donnellan
- [PATCH v5 07/25] powerpc/secvar: Handle format string in the consumer, Andrew Donnellan
- [PATCH v5 19/25] powerpc/pseries: Make caller pass buffer to plpks_read_var(), Andrew Donnellan
- [PATCH v5 08/25] powerpc/secvar: Handle max object size in the consumer, Andrew Donnellan
- [PATCH v5 12/25] powerpc/secvar: Warn when PAGE_SIZE is smaller than max object size, Andrew Donnellan
- [PATCH v5 05/25] powerpc/secvar: Warn and error if multiple secvar ops are set, Andrew Donnellan
- [RFC PATCH v9 00/16] Integrity Policy Enforcement LSM (IPE),
Fan Wu
- [RFC PATCH v9 01/16] security: add ipe lsm, Fan Wu
- [RFC PATCH v9 04/16] security: add new securityfs delete function, Fan Wu
- [RFC PATCH v9 09/16] block|security: add LSM blob to block_device, Fan Wu
- [RFC PATCH v9 14/16] scripts: add boot policy generation program, Fan Wu
- [RFC PATCH v9 15/16] ipe: kunit test for parser, Fan Wu
- [RFC PATCH v9 13/16] ipe: enable support for fs-verity as a trust provider, Fan Wu
- [RFC PATCH v9 02/16] ipe: add policy parser, Fan Wu
- [RFC PATCH v9 16/16] documentation: add ipe documentation, Fan Wu
- [RFC PATCH v9 06/16] ipe: add LSM hooks on execution and kernel read, Fan Wu
- [RFC PATCH v9 12/16] fsverity: consume builtin signature via LSM hook, Fan Wu
- [RFC PATCH v9 11/16] ipe: add support for dm-verity as a trust provider, Fan Wu
- [RFC PATCH v9 03/16] ipe: add evaluation loop and introduce 'boot_verified' as a trust provider, Fan Wu
- [RFC PATCH v9 07/16] uapi|audit|ipe: add ipe auditing support, Fan Wu
- [RFC PATCH v9 08/16] ipe: add permissive toggle, Fan Wu
- [RFC PATCH v9 05/16] ipe: add userspace interface, Fan Wu
- [RFC PATCH v9 10/16] dm-verity: consume root hash digest and signature data via LSM hook, Fan Wu
- Re: [RFC PATCH v9 00/16] Integrity Policy Enforcement LSM (IPE), Roberto Sassu
- [PATCH -next v2] tpm: of: fix return value check in tpm_read_log_memory_region(), Yang Yingliang
- [PATCH -next] tpm: of: fix return value check in tpm_read_log_memory_region(),
Yang Yingliang
- [PATCH -next] evm: call dump_security_xattr() in all cases to remove code duplication,
Xiu Jianfeng
- [PATCH v3 0/2] tpm: Add reserved memory event log,
Eddie James
- [PATCH v3 1/2] ima: Align ima_file_mmap() parameters with mmap_file LSM hook,
Roberto Sassu
- [PATCH ima-evm-utils v4 00/11] Support testing in new enviroments,
Roberto Sassu
- [PATCH ima-evm-utils v4 01/11] Fix error messages and vars in calc_evm_hmac(), Roberto Sassu
- [PATCH ima-evm-utils v4 02/11] Add kernel configuration for tests, Roberto Sassu
- [PATCH ima-evm-utils v4 03/11] Compile the UML kernel and download it in Github Actions, Roberto Sassu
- [PATCH ima-evm-utils v4 04/11] Pass cleanup function and its arguments to _report_exit_and_cleanup(), Roberto Sassu
- [PATCH ima-evm-utils v4 05/11] Add support for creating a new testing environment in functions.sh, Roberto Sassu
- [PATCH ima-evm-utils v4 06/11] Introduce TST_LIST variable to select a test to execute, Roberto Sassu
- [PATCH ima-evm-utils v4 07/11] Add tests for EVM portable signatures, Roberto Sassu
- [PATCH ima-evm-utils v4 08/11] Adapt fsverity.test to be able to run in a new testing environment, Roberto Sassu
- [PATCH ima-evm-utils v4 10/11] ci: haveged requires EPEL on CentOS stream:8, Roberto Sassu
- [PATCH ima-evm-utils v4 11/11] Temporarily remove CONFIG_DEBUG_SG to test portable signatures, Roberto Sassu
- [PATCH ima-evm-utils v4 09/11] Use in-place built fsverity binary instead of installing it, Roberto Sassu
- [PATCH ima-evm-utils] ci: cleanup build.sh test log output,
Mimi Zohar
- [ima-evm-utils PATCH] tests: use new git repo URL for fsverity-utils, Eric Biggers
- [PATCH ima-evm-utils v3 00/11] Support testing in new enviroments,
Roberto Sassu
- [PATCH ima-evm-utils v3 02/11] Add config for UML kernel, Roberto Sassu
- [PATCH ima-evm-utils v3 01/11] Fix error messages and vars in calc_evm_hmac(), Roberto Sassu
- [PATCH ima-evm-utils v3 03/11] Compile the UML kernel and download it in Github Actions, Roberto Sassu
- [PATCH ima-evm-utils v3 04/11] Pass cleanup function and its arguments to _report_exit_and_cleanup(), Roberto Sassu
- [PATCH ima-evm-utils v3 05/11] Add support for creating a new testing environment in functions.sh, Roberto Sassu
- [PATCH ima-evm-utils v3 06/11] Introduce TST_LIST variable to select a test to execute, Roberto Sassu
- [PATCH ima-evm-utils v3 08/11] Adapt fsverity.test to be able to run in a new testing environment, Roberto Sassu
- [PATCH ima-evm-utils v3 07/11] Add tests for EVM portable signatures, Roberto Sassu
- [PATCH ima-evm-utils v3 09/11] Use in-place built fsverity binary instead of installing it, Roberto Sassu
- [PATCH ima-evm-utils v3 10/11] ci: haveged requires EPEL on CentOS stream:8, Roberto Sassu
- [PATCH ima-evm-utils v3 11/11] Temporarily remove CONFIG_DEBUG_SG to test portable signatures, Roberto Sassu
- [PATCH v2 00/11] add integrity and security to TPM2 transactions,
James Bottomley
- [PATCH v2 01/11] tpm: move buffer handling from static inlines to real functions, James Bottomley
- [PATCH v2 02/11] tpm: add buffer handling for TPM2B types, James Bottomley
- [PATCH v2 03/11] tpm: add cursor based buffer functions for response parsing, James Bottomley
- [PATCH v2 04/11] tpm: add buffer function to point to returned parameters, James Bottomley
- [PATCH v2 05/11] tpm: export the context save and load commands, James Bottomley
- [PATCH v2 06/11] tpm: Add full HMAC and encrypt/decrypt session handling code, James Bottomley
- [PATCH v2 07/11] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
- [PATCH v2 08/11] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
- [PATCH v2 09/11] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
- [PATCH v2 10/11] tpm: add the null key name as a sysfs export, James Bottomley
- [PATCH v2 11/11] Documentation: add tpm-security.rst, James Bottomley
- [ANNOUNCE] Linux Security Summit North Americ (LSS-NA) CfP, James Morris
- [PATCH v4 00/24] pSeries dynamic secure boot secvar interface + platform keyring loading,
Andrew Donnellan
- [PATCH v4 04/24] powerpc/secvar: Warn and error if multiple secvar ops are set, Andrew Donnellan
- [PATCH v4 02/24] powerpc/pseries: Fix alignment of PLPKS structures and buffers, Andrew Donnellan
- [PATCH v4 03/24] powerpc/secvar: Use u64 in secvar_operations, Andrew Donnellan
- [PATCH v4 01/24] powerpc/pseries: Fix handling of PLPKS object flushing timeout, Andrew Donnellan
- [PATCH v4 19/24] powerpc/pseries: Turn PSERIES_PLPKS into a hidden option, Andrew Donnellan
- [PATCH v4 15/24] powerpc/pseries: Expose PLPKS config values, support additional fields, Andrew Donnellan
- [PATCH v4 08/24] powerpc/secvar: Clean up init error messages, Andrew Donnellan
- [PATCH v4 20/24] powerpc/pseries: Add helpers to get PLPKS password, Andrew Donnellan
- [PATCH v4 10/24] powerpc/secvar: Allow backend to populate static list of variable names, Andrew Donnellan
- [PATCH v4 14/24] powerpc/pseries: Move PLPKS constants to header file, Andrew Donnellan
- [PATCH v4 16/24] powerpc/pseries: Implement signed update for PLPKS objects, Andrew Donnellan
- [PATCH v4 05/24] powerpc/secvar: Use sysfs_emit() instead of sprintf(), Andrew Donnellan
- [PATCH v4 06/24] powerpc/secvar: Handle format string in the consumer, Andrew Donnellan
- [PATCH v4 22/24] powerpc/pseries: Implement secvars for dynamic secure boot, Andrew Donnellan
- [PATCH v4 17/24] powerpc/pseries: Log hcall return codes for PLPKS debug, Andrew Donnellan
- [PATCH v4 21/24] powerpc/pseries: Pass PLPKS password on kexec, Andrew Donnellan
- [PATCH v4 24/24] integrity/powerpc: Support loading keys from pseries secvar, Andrew Donnellan
- [PATCH v4 09/24] powerpc/secvar: Extend sysfs to include config vars, Andrew Donnellan
- [PATCH v4 11/24] powerpc/secvar: Warn when PAGE_SIZE is smaller than max object size, Andrew Donnellan
- [PATCH v4 13/24] powerpc/pseries: Move plpks.h to include directory, Andrew Donnellan
- [PATCH v4 23/24] integrity/powerpc: Improve error handling & reporting when loading certs, Andrew Donnellan
- [PATCH v4 18/24] powerpc/pseries: Make caller pass buffer to plpks_read_var(), Andrew Donnellan
- [PATCH v4 12/24] powerpc/secvar: Don't print error on ENOENT when reading variables, Andrew Donnellan
- [PATCH v4 07/24] powerpc/secvar: Handle max object size in the consumer, Andrew Donnellan
- [PATCH v3 00/24] pSeries dynamic secure boot secvar interface + platform keyring loading,
Andrew Donnellan
- [PATCH v3 19/24] powerpc/pseries: Turn PSERIES_PLPKS into a hidden option, Andrew Donnellan
- [PATCH v3 18/24] powerpc/pseries: Make caller pass buffer to plpks_read_var(), Andrew Donnellan
- [PATCH v3 15/24] powerpc/pseries: Expose PLPKS config values, support additional fields, Andrew Donnellan
- [PATCH v3 12/24] powerpc/pseries: Move PLPKS constants to header file, Andrew Donnellan
- [PATCH v3 17/24] powerpc/pseries: Log hcall return codes for PLPKS debug, Andrew Donnellan
- [PATCH v3 20/24] powerpc/pseries: Add helpers to get PLPKS password, Andrew Donnellan
- [PATCH v3 24/24] integrity/powerpc: Support loading keys from pseries secvar, Andrew Donnellan
- [PATCH v3 10/24] powerpc/secvar: Don't print error on ENOENT when reading variables, Andrew Donnellan
- [PATCH v3 14/24] powerpc/pseries: Fix alignment of PLPKS structures and buffers, Andrew Donnellan
- [PATCH v3 22/24] powerpc/pseries: Implement secvars for dynamic secure boot, Andrew Donnellan
- [PATCH v3 09/24] powerpc/secvar: Warn when PAGE_SIZE is smaller than max object size, Andrew Donnellan
- [PATCH v3 05/24] powerpc/secvar: Handle max object size in the consumer, Andrew Donnellan
- [PATCH v3 16/24] powerpc/pseries: Implement signed update for PLPKS objects, Andrew Donnellan
- [PATCH v3 11/24] powerpc/pseries: Move plpks.h to include directory, Andrew Donnellan
- [PATCH v3 04/24] powerpc/secvar: Handle format string in the consumer, Andrew Donnellan
- [PATCH v3 06/24] powerpc/secvar: Clean up init error messages, Andrew Donnellan
- [PATCH v3 02/24] powerpc/secvar: WARN_ON_ONCE() if multiple secvar ops are set, Andrew Donnellan
- [PATCH v3 03/24] powerpc/secvar: Use sysfs_emit() instead of sprintf(), Andrew Donnellan
- [PATCH v3 01/24] powerpc/secvar: Use u64 in secvar_operations, Andrew Donnellan
- [PATCH v3 08/24] powerpc/secvar: Allow backend to populate static list of variable names, Andrew Donnellan
- [PATCH v3 13/24] powerpc/pseries: Fix handling of PLPKS object flushing timeout, Andrew Donnellan
- [PATCH v3 23/24] integrity/powerpc: Improve error handling & reporting when loading certs, Andrew Donnellan
- [PATCH v3 07/24] powerpc/secvar: Extend sysfs to include config vars, Andrew Donnellan
- [PATCH v3 21/24] powerpc/pseries: Pass PLPKS password on kexec, Andrew Donnellan
- [PATCH v2 0/2] tpm: Add reserved memory event log,
Eddie James
- [PATCH ima-evm-utils v2 0/9] Support testing with UML kernel,
Roberto Sassu
- [PATCH ima-evm-utils v2 1/9] Fix error messages and mdlen init in calc_evm_hmac(), Roberto Sassu
- [PATCH ima-evm-utils v2 2/9] Add config for UML kernel, Roberto Sassu
- [PATCH ima-evm-utils v2 5/9] Introduce TST_LIST variable to select a test to execute, Roberto Sassu
- [PATCH ima-evm-utils v2 3/9] Compile the UML kernel and download it in Github Actions, Roberto Sassu
- [PATCH ima-evm-utils v2 4/9] Add support for UML in functions.sh, Roberto Sassu
- [PATCH ima-evm-utils v2 6/9] Add tests for EVM portable signatures, Roberto Sassu
- [PATCH ima-evm-utils v2 7/9] Adapt fsverity.test to work with UML kernel, Roberto Sassu
- [PATCH ima-evm-utils v2 8/9] Use in-place built fsverity binary instead of installing it, Roberto Sassu
- [PATCH ima-evm-utils v2 9/9] ci: haveged requires EPEL on CentOS stream:8, Roberto Sassu
- Re: [PATCH ima-evm-utils v2 0/9] Support testing with UML kernel, Mimi Zohar
- [PATCH ima-evm-utils 0/8] Support testing with UML kernel,
Roberto Sassu
- [PATCH v7 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v6 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v5 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v4 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v3 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH] ima: return IMA digest value only when IMA_COLLECTED flag is set,
Matt Bobrowski
- [PATCH] ima: fix error handling logic when file measurement failed,
Matt Bobrowski
- [PATCH] tpm: Add reserved memory event log,
Eddie James
- ima: zeroed out digest values,
Matt Bobrowski
- [PATCH v2 0/2] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH] KEYS: trusted: tpm2: use correct function name in kernel-doc,
Randy Dunlap
- [PATCH] ima: fix ima_delete_rules() kernel-doc warning,
Randy Dunlap
- [PATCH V2] tpm_crb: Add support for CRB devices based on Pluton,
Matthew Garrett
- [PATCH v3 1/2] lockdown: kexec_file: prevent unsigned kernel image when KEXEC_SIG not enabled,
Coiby Xu
- [REGRESSION] suspend to ram fails in 6.2-rc1 due to tpm errors,
Vlastimil Babka
- Re: [REGRESSION] suspend to ram fails in 6.2-rc1 due to tpm errors, Johannes Altmanninger
- Re: [REGRESSION] suspend to ram fails in 6.2-rc1 due to tpm errors, Jarkko Sakkinen
[PATCH -next] evm: Use __vfs_setxattr() to update security.evm,
Xiu Jianfeng
[PATCH v5 0/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature(),
Roberto Sassu
[PATCH v4 1/2] lib/mpi: Fix buffer overrun when SG is too long,
Roberto Sassu
Seal/Unseal trusted keys against PCR policy,
Sughosh Ganu
[PATCH 0/2] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
[PATCH] ima: Handle error code from security_audit_rule_match,
GUO Zihua
[PATCH -next] evm: Support small xattr in dump_security_xattr(),
Xiu Jianfeng
[RFC][PATCH 2/2] ima: created new ima template ima-cgpath for Kubernates' pods attestation, Enrico Bravi
[RFC][PATCH 1/2] ima: created new ima template ima-dep-cgn for OCI containers attestation,
Enrico Bravi
Stable backport request,
Mimi Zohar
[PATCH v2] security: Restore passing final prot to ima_file_mmap(),
Roberto Sassu
[PATCH] security: Restore passing final prot to ima_file_mmap(), Roberto Sassu
[PATCH v3 1/2] lib/mpi: Fix buffer overrun when SG is too long,
Roberto Sassu
[PATCH] libimaevm: do not crash if the certificate cannot be read,
Alberto Mardegan
Question on loading trusted key with keyctl command,
Sughosh Ganu
Re: [PATCH] ima: add check for khdr->buffer_size, Mimi Zohar
IMA & tpm_unsealdata with PCR 10,
Michaël Musset
[PATCH v3 00/10] Add CA enforcement keyring restrictions,
Eric Snowberg
- [PATCH v3 01/10] KEYS: Create static version of public_key_verify_signature, Eric Snowberg
- [PATCH v3 04/10] KEYS: X.509: Parse Key Usage, Eric Snowberg
- [PATCH v3 05/10] KEYS: Introduce a CA endorsed flag, Eric Snowberg
- [PATCH v3 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed, Eric Snowberg
- [PATCH v3 02/10] KEYS: Add missing function documentation, Eric Snowberg
- [PATCH v3 03/10] KEYS: X.509: Parse Basic Constraints for CA, Eric Snowberg
- [PATCH v3 09/10] KEYS: CA link restriction, Eric Snowberg
- [PATCH v3 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v3 06/10] KEYS: Introduce keyring restriction that validates ca trust, Eric Snowberg
- [PATCH v3 08/10] integrity: Use root of trust signature restriction, Eric Snowberg
- Re: [PATCH v3 00/10] Add CA enforcement keyring restrictions, Mimi Zohar
[GIT PULL] integrity: susbsytem updates for v6.2,
Mimi Zohar
Firmware bug on ASRock X370/Ryzen 2600 prevents use of TPM device, Genevieve
[PATCH] tpm_crb: Add support for CRB devices based on Pluton,
Matthew Garrett
[PATCH 00/11] add integrity and security to TPM2 transactions,
James Bottomley
- [PATCH 01/11] tpm: move buffer handling from static inlines to real functions, James Bottomley
- [PATCH 03/11] tpm: add cursor based buffer functions for response parsing, James Bottomley
- [PATCH 02/11] tpm: add buffer handling for TPM2B types, James Bottomley
- [PATCH 04/11] tpm: add buffer function to point to returned parameters, James Bottomley
- [PATCH 05/11] tpm: export the context save and load commands, James Bottomley
- [PATCH 06/11] tpm: Add full HMAC and encrypt/decrypt session handling code, James Bottomley
- [PATCH 07/11] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
- [PATCH 08/11] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
- [PATCH 09/11] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
- [PATCH 10/11] tpm: add the null key name as a sysfs export, James Bottomley
[Index of Archives]
[Linux Kernel]
[Linux Kernel Hardening]
[Linux NFS]
[Linux NILFS]
[Linux USB Devel]
[Video for Linux]
[Linux SCSI]
[Yosemite Forum]
