Linux Integrity
[Prev Page][Next Page]
- Re: [PATCH ima-evm-utils v3 03/11] Compile the UML kernel and download it in Github Actions, (continued)
- [PATCH v2 00/11] add integrity and security to TPM2 transactions,
James Bottomley
- [PATCH v2 01/11] tpm: move buffer handling from static inlines to real functions, James Bottomley
- [PATCH v2 02/11] tpm: add buffer handling for TPM2B types, James Bottomley
- [PATCH v2 03/11] tpm: add cursor based buffer functions for response parsing, James Bottomley
- [PATCH v2 04/11] tpm: add buffer function to point to returned parameters, James Bottomley
- [PATCH v2 05/11] tpm: export the context save and load commands, James Bottomley
- [PATCH v2 06/11] tpm: Add full HMAC and encrypt/decrypt session handling code, James Bottomley
- [PATCH v2 07/11] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
- [PATCH v2 08/11] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
- [PATCH v2 09/11] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
- [PATCH v2 10/11] tpm: add the null key name as a sysfs export, James Bottomley
- [PATCH v2 11/11] Documentation: add tpm-security.rst, James Bottomley
- [ANNOUNCE] Linux Security Summit North Americ (LSS-NA) CfP, James Morris
- [PATCH v4 00/24] pSeries dynamic secure boot secvar interface + platform keyring loading,
Andrew Donnellan
- [PATCH v4 04/24] powerpc/secvar: Warn and error if multiple secvar ops are set, Andrew Donnellan
- [PATCH v4 02/24] powerpc/pseries: Fix alignment of PLPKS structures and buffers, Andrew Donnellan
- [PATCH v4 03/24] powerpc/secvar: Use u64 in secvar_operations, Andrew Donnellan
- [PATCH v4 01/24] powerpc/pseries: Fix handling of PLPKS object flushing timeout, Andrew Donnellan
- [PATCH v4 19/24] powerpc/pseries: Turn PSERIES_PLPKS into a hidden option, Andrew Donnellan
- [PATCH v4 15/24] powerpc/pseries: Expose PLPKS config values, support additional fields, Andrew Donnellan
- [PATCH v4 08/24] powerpc/secvar: Clean up init error messages, Andrew Donnellan
- [PATCH v4 20/24] powerpc/pseries: Add helpers to get PLPKS password, Andrew Donnellan
- [PATCH v4 10/24] powerpc/secvar: Allow backend to populate static list of variable names, Andrew Donnellan
- [PATCH v4 14/24] powerpc/pseries: Move PLPKS constants to header file, Andrew Donnellan
- [PATCH v4 16/24] powerpc/pseries: Implement signed update for PLPKS objects, Andrew Donnellan
- [PATCH v4 05/24] powerpc/secvar: Use sysfs_emit() instead of sprintf(), Andrew Donnellan
- [PATCH v4 06/24] powerpc/secvar: Handle format string in the consumer, Andrew Donnellan
- [PATCH v4 22/24] powerpc/pseries: Implement secvars for dynamic secure boot, Andrew Donnellan
- [PATCH v4 17/24] powerpc/pseries: Log hcall return codes for PLPKS debug, Andrew Donnellan
- [PATCH v4 21/24] powerpc/pseries: Pass PLPKS password on kexec, Andrew Donnellan
- [PATCH v4 24/24] integrity/powerpc: Support loading keys from pseries secvar, Andrew Donnellan
- [PATCH v4 09/24] powerpc/secvar: Extend sysfs to include config vars, Andrew Donnellan
- [PATCH v4 11/24] powerpc/secvar: Warn when PAGE_SIZE is smaller than max object size, Andrew Donnellan
- [PATCH v4 13/24] powerpc/pseries: Move plpks.h to include directory, Andrew Donnellan
- [PATCH v4 23/24] integrity/powerpc: Improve error handling & reporting when loading certs, Andrew Donnellan
- [PATCH v4 18/24] powerpc/pseries: Make caller pass buffer to plpks_read_var(), Andrew Donnellan
- [PATCH v4 12/24] powerpc/secvar: Don't print error on ENOENT when reading variables, Andrew Donnellan
- [PATCH v4 07/24] powerpc/secvar: Handle max object size in the consumer, Andrew Donnellan
- [PATCH v3 00/24] pSeries dynamic secure boot secvar interface + platform keyring loading,
Andrew Donnellan
- [PATCH v3 19/24] powerpc/pseries: Turn PSERIES_PLPKS into a hidden option, Andrew Donnellan
- [PATCH v3 18/24] powerpc/pseries: Make caller pass buffer to plpks_read_var(), Andrew Donnellan
- [PATCH v3 15/24] powerpc/pseries: Expose PLPKS config values, support additional fields, Andrew Donnellan
- [PATCH v3 12/24] powerpc/pseries: Move PLPKS constants to header file, Andrew Donnellan
- [PATCH v3 17/24] powerpc/pseries: Log hcall return codes for PLPKS debug, Andrew Donnellan
- [PATCH v3 20/24] powerpc/pseries: Add helpers to get PLPKS password, Andrew Donnellan
- [PATCH v3 24/24] integrity/powerpc: Support loading keys from pseries secvar, Andrew Donnellan
- [PATCH v3 10/24] powerpc/secvar: Don't print error on ENOENT when reading variables, Andrew Donnellan
- [PATCH v3 14/24] powerpc/pseries: Fix alignment of PLPKS structures and buffers, Andrew Donnellan
- [PATCH v3 22/24] powerpc/pseries: Implement secvars for dynamic secure boot, Andrew Donnellan
- [PATCH v3 09/24] powerpc/secvar: Warn when PAGE_SIZE is smaller than max object size, Andrew Donnellan
- [PATCH v3 05/24] powerpc/secvar: Handle max object size in the consumer, Andrew Donnellan
- [PATCH v3 16/24] powerpc/pseries: Implement signed update for PLPKS objects, Andrew Donnellan
- [PATCH v3 11/24] powerpc/pseries: Move plpks.h to include directory, Andrew Donnellan
- [PATCH v3 04/24] powerpc/secvar: Handle format string in the consumer, Andrew Donnellan
- [PATCH v3 06/24] powerpc/secvar: Clean up init error messages, Andrew Donnellan
- [PATCH v3 02/24] powerpc/secvar: WARN_ON_ONCE() if multiple secvar ops are set, Andrew Donnellan
- [PATCH v3 03/24] powerpc/secvar: Use sysfs_emit() instead of sprintf(), Andrew Donnellan
- [PATCH v3 01/24] powerpc/secvar: Use u64 in secvar_operations, Andrew Donnellan
- [PATCH v3 08/24] powerpc/secvar: Allow backend to populate static list of variable names, Andrew Donnellan
- [PATCH v3 13/24] powerpc/pseries: Fix handling of PLPKS object flushing timeout, Andrew Donnellan
- [PATCH v3 23/24] integrity/powerpc: Improve error handling & reporting when loading certs, Andrew Donnellan
- [PATCH v3 07/24] powerpc/secvar: Extend sysfs to include config vars, Andrew Donnellan
- [PATCH v3 21/24] powerpc/pseries: Pass PLPKS password on kexec, Andrew Donnellan
- [PATCH v2 0/2] tpm: Add reserved memory event log,
Eddie James
- [PATCH ima-evm-utils v2 0/9] Support testing with UML kernel,
Roberto Sassu
- [PATCH ima-evm-utils v2 1/9] Fix error messages and mdlen init in calc_evm_hmac(), Roberto Sassu
- [PATCH ima-evm-utils v2 2/9] Add config for UML kernel, Roberto Sassu
- [PATCH ima-evm-utils v2 5/9] Introduce TST_LIST variable to select a test to execute, Roberto Sassu
- [PATCH ima-evm-utils v2 3/9] Compile the UML kernel and download it in Github Actions, Roberto Sassu
- [PATCH ima-evm-utils v2 4/9] Add support for UML in functions.sh, Roberto Sassu
- [PATCH ima-evm-utils v2 6/9] Add tests for EVM portable signatures, Roberto Sassu
- [PATCH ima-evm-utils v2 7/9] Adapt fsverity.test to work with UML kernel, Roberto Sassu
- [PATCH ima-evm-utils v2 8/9] Use in-place built fsverity binary instead of installing it, Roberto Sassu
- [PATCH ima-evm-utils v2 9/9] ci: haveged requires EPEL on CentOS stream:8, Roberto Sassu
- Re: [PATCH ima-evm-utils v2 0/9] Support testing with UML kernel, Mimi Zohar
- [PATCH ima-evm-utils 0/8] Support testing with UML kernel,
Roberto Sassu
- [PATCH v7 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v6 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v5 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v4 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH v3 0/3] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH] ima: return IMA digest value only when IMA_COLLECTED flag is set,
Matt Bobrowski
- [PATCH] ima: fix error handling logic when file measurement failed,
Matt Bobrowski
- [PATCH] tpm: Add reserved memory event log,
Eddie James
- ima: zeroed out digest values,
Matt Bobrowski
- [PATCH v2 0/2] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
- [PATCH] KEYS: trusted: tpm2: use correct function name in kernel-doc,
Randy Dunlap
- [PATCH] ima: fix ima_delete_rules() kernel-doc warning,
Randy Dunlap
- [PATCH V2] tpm_crb: Add support for CRB devices based on Pluton,
Matthew Garrett
- [PATCH v3 1/2] lockdown: kexec_file: prevent unsigned kernel image when KEXEC_SIG not enabled,
Coiby Xu
- [REGRESSION] suspend to ram fails in 6.2-rc1 due to tpm errors,
Vlastimil Babka
- Re: [REGRESSION] suspend to ram fails in 6.2-rc1 due to tpm errors, Johannes Altmanninger
- Re: [REGRESSION] suspend to ram fails in 6.2-rc1 due to tpm errors, Jarkko Sakkinen
[PATCH -next] evm: Use __vfs_setxattr() to update security.evm,
Xiu Jianfeng
[PATCH v5 0/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature(),
Roberto Sassu
[PATCH v4 1/2] lib/mpi: Fix buffer overrun when SG is too long,
Roberto Sassu
Seal/Unseal trusted keys against PCR policy,
Sughosh Ganu
[PATCH 0/2] ima: Fix IMA mishandling of LSM based rule during,
GUO Zihua
[PATCH] ima: Handle error code from security_audit_rule_match,
GUO Zihua
[PATCH -next] evm: Support small xattr in dump_security_xattr(),
Xiu Jianfeng
[RFC][PATCH 2/2] ima: created new ima template ima-cgpath for Kubernates' pods attestation, Enrico Bravi
[RFC][PATCH 1/2] ima: created new ima template ima-dep-cgn for OCI containers attestation,
Enrico Bravi
Stable backport request,
Mimi Zohar
[PATCH v2] security: Restore passing final prot to ima_file_mmap(),
Roberto Sassu
[PATCH] security: Restore passing final prot to ima_file_mmap(), Roberto Sassu
[PATCH v3 1/2] lib/mpi: Fix buffer overrun when SG is too long,
Roberto Sassu
[PATCH] libimaevm: do not crash if the certificate cannot be read,
Alberto Mardegan
Question on loading trusted key with keyctl command,
Sughosh Ganu
Re: [PATCH] ima: add check for khdr->buffer_size, Mimi Zohar
IMA & tpm_unsealdata with PCR 10,
Michaël Musset
[PATCH v3 00/10] Add CA enforcement keyring restrictions,
Eric Snowberg
- [PATCH v3 01/10] KEYS: Create static version of public_key_verify_signature, Eric Snowberg
- [PATCH v3 04/10] KEYS: X.509: Parse Key Usage, Eric Snowberg
- [PATCH v3 05/10] KEYS: Introduce a CA endorsed flag, Eric Snowberg
- [PATCH v3 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed, Eric Snowberg
- [PATCH v3 02/10] KEYS: Add missing function documentation, Eric Snowberg
- [PATCH v3 03/10] KEYS: X.509: Parse Basic Constraints for CA, Eric Snowberg
- [PATCH v3 09/10] KEYS: CA link restriction, Eric Snowberg
- [PATCH v3 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v3 06/10] KEYS: Introduce keyring restriction that validates ca trust, Eric Snowberg
- [PATCH v3 08/10] integrity: Use root of trust signature restriction, Eric Snowberg
- Re: [PATCH v3 00/10] Add CA enforcement keyring restrictions, Mimi Zohar
[GIT PULL] integrity: susbsytem updates for v6.2,
Mimi Zohar
Firmware bug on ASRock X370/Ryzen 2600 prevents use of TPM device, Genevieve
[PATCH] tpm_crb: Add support for CRB devices based on Pluton,
Matthew Garrett
[PATCH 00/11] add integrity and security to TPM2 transactions,
James Bottomley
- [PATCH 01/11] tpm: move buffer handling from static inlines to real functions, James Bottomley
- [PATCH 03/11] tpm: add cursor based buffer functions for response parsing, James Bottomley
- [PATCH 02/11] tpm: add buffer handling for TPM2B types, James Bottomley
- [PATCH 04/11] tpm: add buffer function to point to returned parameters, James Bottomley
- [PATCH 05/11] tpm: export the context save and load commands, James Bottomley
- [PATCH 06/11] tpm: Add full HMAC and encrypt/decrypt session handling code, James Bottomley
- [PATCH 07/11] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
- [PATCH 08/11] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
- [PATCH 09/11] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
- [PATCH 10/11] tpm: add the null key name as a sysfs export, James Bottomley
- [PATCH 11/11] Documentation: add tpm-security.rst, James Bottomley
[PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature(),
Roberto Sassu
[RFC] IMA LSM based rule race condition issue on 4.19 LTS,
Guozihua (Scott)
[PATCH] KEYS: asymmetric: Make a copy of sig and digest in vmalloced stack,
Roberto Sassu
[GIT PULL] tpmdd updates for tpmdd-next-v6.2-rc1,
Jarkko Sakkinen
[PATCH] fsverity: mark builtin signatures as deprecated,
Eric Biggers
[PATCH] fsverity: don't check builtin signatures when require_signatures=0,
Eric Biggers
[PATCH v2 00/10] Add CA enforcement keyring restrictions,
Eric Snowberg
- [PATCH v2 02/10] KEYS: Add missing function documentation, Eric Snowberg
- [PATCH v2 05/10] KEYS: Introduce a CA endorsed flag, Eric Snowberg
- [PATCH v2 06/10] KEYS: Introduce keyring restriction that validates ca trust, Eric Snowberg
- [PATCH v2 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed, Eric Snowberg
- [PATCH v2 08/10] integrity: Use root of trust signature restriction, Eric Snowberg
- [PATCH v2 01/10] KEYS: Create static version of public_key_verify_signature, Eric Snowberg
- [PATCH v2 09/10] KEYS: CA link restriction, Eric Snowberg
- [PATCH v2 04/10] KEYS: X.509: Parse Key Usage, Eric Snowberg
- [PATCH v2 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v2 03/10] KEYS: X.509: Parse Basic Constraints for CA, Eric Snowberg
- Re: [PATCH v2 00/10] Add CA enforcement keyring restrictions, Coiby Xu
[PATCH] public_key: Add a comment to public_key_signature struct definition,
Roberto Sassu
[RESEND PATCH v3] tpm: st33zp24: remove pointless checks on probe,
Dmitry Torokhov
[PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
[PATCH v2 0/2] ima/evm: Ensure digest to verify is in linear mapping area,
Roberto Sassu
[PATCH] tpm/ppi: use sysfs_emit() to instead of scnprintf(), ye.xingchen
[PATCH ima-evm-utils] Experimental fsverity.test related GA CI improvements,
Vitaly Chikunov
[PATCH] fsverity: simplify fsverity_get_digest(),
Eric Biggers
[PATCH v3] char: tpm: Protect tpm_pm_suspend with locks,
Jason A. Donenfeld
[REGRESSION] suspend to ram fails in 6.1 due to tpm errors,
Vlastimil Babka
[PATCH] tpm_crb: Remove a useless include, Christophe JAILLET
[PATCH v5] evm: Correct inode_init_security hooks behaviors,
Nicolas Bouchinet
[PATCH] ima: Fix hash dependency to correct algorithm,
Tianjia Zhang
[PATCH v11 00/14] TPM IRQ fixes,
Lino Sanfilippo
- [PATCH v11 10/14] tpm, tpm_tis: Request threaded interrupt handler, Lino Sanfilippo
- [PATCH v11 02/14] tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register, Lino Sanfilippo
- [PATCH v11 07/14] tpm, tpm_tis: Move interrupt mask checks into own function, Lino Sanfilippo
- [PATCH v11 05/14] tpm, tpm_tis: Claim locality before writing interrupt registers, Lino Sanfilippo
- [PATCH v11 12/14] tpm, tpm_tis: Claim locality when interrupts are reenabled on resume, Lino Sanfilippo
- [PATCH v11 03/14] tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed, Lino Sanfilippo
- [PATCH v11 04/14] tpm, tpm_tis: Do not skip reset of original interrupt vector, Lino Sanfilippo
- [PATCH v11 01/14] tpm, tpm_tis: Avoid cache incoherency in test for interrupts, Lino Sanfilippo
- [PATCH v11 13/14] tpm, tpm_tis: startup chip before testing for interrupts, Lino Sanfilippo
- [PATCH v11 06/14] tpm, tpm_tis: Only handle supported interrupts, Lino Sanfilippo
- [PATCH v11 08/14] tpm, tpm_tis: do not check for the active locality in interrupt handler, Lino Sanfilippo
- [PATCH v11 09/14] tpm, tpm: Implement usage counter for locality, Lino Sanfilippo
- [PATCH v11 14/14] tpm, tpm_tis: Enable interrupt test, Lino Sanfilippo
- [PATCH v11 11/14] tpm, tpm_tis: Claim locality in interrupt handler, Lino Sanfilippo
- Re: [PATCH v11 00/14] TPM IRQ fixes, Lino Sanfilippo
[PATCH] tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init(),
Yuan Can
[PATCH v6 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes,
Roberto Sassu
[PATCH v5 0/6] evm: Prepare for moving to the LSM infrastructure,
Roberto Sassu
[Index of Archives]
[Linux Kernel]
[Linux Kernel Hardening]
[Linux NFS]
[Linux NILFS]
[Linux USB Devel]
[Video for Linux]
[Linux SCSI]
[Yosemite Forum]
