Linux Integrity
[Prev Page][Next Page]
- Re: [PATCH v8 15/17] efi/mokvar: move up init order, (continued)
- [PATCH v30 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v30 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
- [PATCH v30 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
- [PATCH v30 11/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
- [PATCH 0/2] selftests: tpm2: Probe for available PCR bank,
Stefan Berger
- [PATCH v7 00/17] Enroll kernel keys thru MOK,
Eric Snowberg
- [PATCH v7 05/17] KEYS: CA link restriction, Eric Snowberg
- [PATCH v7 12/17] KEYS: integrity: change link restriction to trust the machine keyring, Eric Snowberg
- [PATCH v7 04/17] X.509: Parse Basic Constraints for CA, Eric Snowberg
- [PATCH v7 01/17] integrity: Introduce a Linux keyring called machine, Eric Snowberg
- [PATCH v7 06/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v7 02/17] integrity: Do not allow machine keyring updates following init, Eric Snowberg
- [PATCH v7 07/17] integrity: Fix warning about missing prototypes, Eric Snowberg
- [PATCH v7 13/17] KEYS: link secondary_trusted_keys to machine trusted keys, Eric Snowberg
- [PATCH v7 15/17] efi/mokvar: move up init order, Eric Snowberg
- [PATCH v7 14/17] integrity: store reference to machine keyring, Eric Snowberg
- [PATCH v7 16/17] integrity: Trust MOK keys if MokListTrustedRT found, Eric Snowberg
- [PATCH v7 10/17] KEYS: add a reference to machine keyring, Eric Snowberg
- [PATCH v7 11/17] KEYS: Introduce link restriction for machine keys, Eric Snowberg
- [PATCH v7 17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true, Eric Snowberg
- [PATCH v7 09/17] KEYS: Rename get_builtin_and_secondary_restriction, Eric Snowberg
- [PATCH v7 08/17] integrity: add new keyring handler for mok keys, Eric Snowberg
- [PATCH v7 03/17] KEYS: Create static version of public_key_verify_signature, Eric Snowberg
- Re: [PATCH v7 00/17] Enroll kernel keys thru MOK, Jarkko Sakkinen
- [PATCH v17 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
- [PATCH] char: tpm: cr50_i2c: Drop if with an always false condition,
Uwe Kleine-König
- [RFC][PATCH 0/5] shmem/fsverity: Prepare for mandatory integrity enforcement,
Roberto Sassu
- [PATCH v4 0/2] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
- [PATCH v16 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
- [RFC PATCH] ima: differentiate overlay, pivot_root, and other pathnames,
Mimi Zohar
- [PATCH] tpm_tis: Fix an error handling path in 'tpm_tis_core_init()',
Christophe JAILLET
- [PATCH 0/2] Additional appended signature cleanup,
Michal Suchanek
- ima-evm-utils: version 1.4 released,
Mimi Zohar
- [PATCH RFC] integrity: disassociate ima_filter_rule from security_audit_rule,
Casey Schaufler
- Disassociating ima_filter_rule* from security_audit_rule*,
Casey Schaufler
- [PATCH v19 0/5] Add tpm i2c ptp driver,
amirmizi6
- RE: [RFC PATCH v7 14/16] scripts: add boot policy generation program,
Roberto Sassu
- RE: [RFC PATCH v7 04/16] ipe: add userspace interface,
Roberto Sassu
- [PATCH ima-evm-utils] travis: use alt:sisyphus from docker.io,
Mimi Zohar
- [PATCH v18 0/6] Add tpm i2c ptp driver,
amirmizi6
- [GIT PULL] integrity subsystem updates for v5.16,
Mimi Zohar
- [PATCH RESEND] KEYS: trusted: Fix trusted key backends when building as module,
andreas
- IMA testsuite?,
Casey Schaufler
- [PATCH v2] tpm: tpm_tis_spi_cr50: Add default RNG quality,
AngeloGioacchino Del Regno
- [PATCH] evm: mark evm_fixmode as __ro_after_init,
Austin Kim
- [RESEND PATCH] tpm: tpm_tis_spi_cr50: Add default RNG quality, AngeloGioacchino Del Regno
- [PATCH] tpm: tpm_tis_spi_cr50: Add default RNG quality,
AngeloGioacchino Del Regno
- [PATCH] ima/evm: mark evm_fixmode as __ro_after_init,
Austin Kim
- [PATCH v3 0/2] use SM3 instead of SM3_256,
Tianjia Zhang
- [PATCH ima-evm-utils 1/2] switch to using crun for podman,
Mimi Zohar
- [GIT PULL] TPM DEVICE DRIVER changes for v5.16,
Jarkko Sakkinen
- RE: [RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE),
Roberto Sassu
- [PATCH v17 0/6] Add tpm i2c ptp driver,
amirmizi6
- RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature,
Roberto Sassu
- [PATCH v16 0/6] Add tpm i2c ptp driver,
amirmizi6
- [PATCH v2 0/2] use SM3 instead of SM3_256,
Tianjia Zhang
- [PATCH v1 1/3] ima: define ima_trusted_for hook,
Mimi Zohar
- [PATCH 1/2] ima: define ima_trusted_for hook,
Mimi Zohar
- [PATCH] tpm/st33zp24: drop unneeded over-commenting,
Sohaib Mohamed
- [PATCH v15 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
- [PATCH v15 2/3] arch: Wire up trusted_for(2), Mickaël Salaün
[PATCH v2 00/20] Make some spi device drivers return zero in .remove(),
Uwe Kleine-König
[PATCH v2 1/1] tpm: add request_locality before write TPM_INT_ENABLE,
Chen Jun
[PATCH v2] tpm: ibmvtpm: Make use of dma_alloc_noncoherent(),
Cai Huoqing
[PATCH 13/13] tpm: st33zp24: Make st33zp24_remove() return void,
Uwe Kleine-König
[PATCH v4 0/5] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys,
Ahmad Fatoum
[PATCH] tpm: ibmvtpm: Make use of dma_alloc_coherent(),
Cai Huoqing
[PATCH 0/2] tpm: use SM3 instead of SM3_256,
Tianjia Zhang
[PATCH v14 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH v6 0/2] IMA checkpatch fixes,
Petr Vorel
[PATCH] tpm/st33zp24: Fix typo in st33zp24.c,
Sohaib Mohamed
[PATCH v3 1/2] ima: fix uid code style problems,
Alex Henrie
[PATCH v13 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH v8 0/3] IMA: Add tests for uid, gid, fowner, and fgroup options,
Petr Vorel
- [PATCH v8 1/3] IMA: Move check_policy_writable() to ima_setup.sh and rename it, Petr Vorel
- [PATCH v8 2/3] IMA: Move ima_check to ima_setup.sh, Petr Vorel
- [PATCH v8 3/3] IMA: Add tests for uid, gid, fowner, and fgroup options, Petr Vorel
- Re: [PATCH v8 0/3] IMA: Add tests for uid, gid, fowner, and fgroup options, Petr Vorel
[PATCH] IMA: make runtime measurement list pollable,
Daiki Ueno
[PATCH v2] ima: add gid support,
Alex Henrie
[PATCH v3] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[PATCH v6] tpm: Add Upgrade/Reduced mode support for TPM2 modules,
Borys Movchan
DIGLIM demo, Roberto Sassu
[RFC][PATCH 0/7] ima: Measure and appraise files with DIGLIM,
Roberto Sassu
[PATCH] spi: bcm2835: do not unregister controller in shutdown handler,
Lino Sanfilippo
[PATCH v29 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
[PATCH v29 13/28] IMA: Change internal interfaces to use lsmblobs, Casey Schaufler
[PATCH v29 12/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
[PATCH v29 11/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
[PATCH v29 10/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
[PATCH v29 05/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
[PATCH v2] tpm_tis_spi: Add missing SPI ID,
Mark Brown
[bug report] tpm/tpm_i2c_stm_st33: Split tpm_i2c_tpm_st33 in 2 layers (core + phy), Dan Carpenter
[PATCH] tpm_tis_spi: Add missing SPI ID,
Mark Brown
[PATCH ltp v7 1/3] IMA: Move check_policy_writable() to ima_setup.sh and rename it,
Alex Henrie
[PATCH v6 0/3] IMA: Add tests for uid, gid, fowner, and fgroup options,
Petr Vorel
[PATCH ltp v5 1/3] IMA: Move check_policy_writable to ima_setup.sh and rename it,
Alex Henrie
[PATCH ltp v4 1/3] IMA: Move check_policy_writable to ima_setup.sh and rename it,
Alex Henrie
[PATCH] tpm/eventlog: Don't abort tpm_read_log on faulty ACPI config,
Morten Linderud
[PATCH v2] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[RFC][PATCH 0/9] integrity: Introduce DIGLIM advanced features,
Roberto Sassu
[zohar-integrity:next-integrity-testing 1/1] security/integrity/ima/ima_policy.c:684:25: sparse: sparse: incompatible types in comparison expression (different address spaces):,
kernel test robot
[PATCH v6 00/13] Enroll kernel keys thru MOK,
Eric Snowberg
- [PATCH v6 01/13] integrity: Introduce a Linux keyring called machine, Eric Snowberg
- [PATCH v6 07/13] KEYS: add a reference to machine keyring, Eric Snowberg
- [PATCH v6 03/13] KEYS: CA link restriction, Eric Snowberg
- [PATCH v6 02/13] integrity: Do not allow machine keyring updates following init, Eric Snowberg
- [PATCH v6 05/13] integrity: add new keyring handler for mok keys, Eric Snowberg
- [PATCH v6 08/13] KEYS: Introduce link restriction for machine keys, Eric Snowberg
- [PATCH v6 12/13] integrity: Trust MOK keys if MokListTrustedRT found, Eric Snowberg
- [PATCH v6 04/13] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v6 13/13] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true, Eric Snowberg
- [PATCH v6 06/13] KEYS: Rename get_builtin_and_secondary_restriction, Eric Snowberg
- [PATCH v6 10/13] KEYS: link secondary_trusted_keys to machine trusted keys, Eric Snowberg
- [PATCH v6 11/13] integrity: store reference to machine keyring, Eric Snowberg
- [PATCH v6 09/13] KEYS: integrity: change link restriction to trust the machine keyring, Eric Snowberg
- Re: [PATCH v6 00/13] Enroll kernel keys thru MOK, Jarkko Sakkinen
- Re: [PATCH v6 00/13] Enroll kernel keys thru MOK, Nayna
[PATCH v3 00/13] integrity: Introduce DIGLIM,
Roberto Sassu
- [PATCH v3 01/13] diglim: Overview, Roberto Sassu
- [PATCH v3 03/13] diglim: Objects, Roberto Sassu
- [PATCH v3 04/13] diglim: Methods, Roberto Sassu
- [PATCH v3 02/13] diglim: Basic definitions, Roberto Sassu
- [PATCH v3 05/13] diglim: Parser, Roberto Sassu
- [PATCH v3 06/13] diglim: IMA info, Roberto Sassu
- [PATCH v3 07/13] diglim: Interfaces - digest_list_add, digest_list_del, Roberto Sassu
- [PATCH v3 09/13] diglim: Interfaces - digest_list_label, Roberto Sassu
- [PATCH v3 08/13] diglim: Interfaces - digest_lists_loaded, Roberto Sassu
- [PATCH v3 10/13] diglim: Interfaces - digest_query, Roberto Sassu
- [PATCH v3 11/13] diglim: Interfaces - digests_count, Roberto Sassu
- [PATCH v3 12/13] diglim: Remote Attestation, Roberto Sassu
- [PATCH v3 13/13] diglim: Tests, Roberto Sassu
- RE: [PATCH v3 00/13] integrity: Introduce DIGLIM, Roberto Sassu
[PATCH ltp v3 1/2] IMA: Move check_policy_writable to ima_setup.sh and rename it,
Alex Henrie
[PATCH v15 0/6] Add tpm i2c ptp driver,
amirmizi6
[PATCH v4 0/9] ima-evm-utils: Add support for signing with pkcs11 URIs,
Stefan Berger
- [PATCH v4 2/9] evmctl: Handle failure to initialize the openssl engine, Stefan Berger
- [PATCH v4 1/9] evmctl: Implement support for EVMCTL_KEY_PASSWORD environment variable, Stefan Berger
- [PATCH v4 3/9] evmctl: Implement function for setting up an OpenSSL engine, Stefan Berger
- [PATCH v4 4/9] evmctl: Define and use an ENGINE field in libimaevm_params, Stefan Berger
- [PATCH v4 5/9] evmctl: use the pkcs11 engine for pkcs11: prefixed URIs, Stefan Berger
- [PATCH v4 6/9] libimaevm: Add support for pkcs11 private keys for signing a v2 hash, Stefan Berger
- [PATCH v4 7/9] tests: Import softhsm_setup script to enable pkcs11 test case, Stefan Berger
- [PATCH v4 9/9] tests: Get the packages for pkcs11 testing on the CI/CD system, Stefan Berger
- [PATCH v4 8/9] tests: Extend sign_verify test with pkcs11-specific test, Stefan Berger
- Re: [PATCH v4 0/9] ima-evm-utils: Add support for signing with pkcs11 URIs, Mimi Zohar
[PATCH v14 0/7] Add tpm i2c ptp driver,
amirmizi6
[PATCH v2 1/1] tpm/tpm_i2c_infineon: Fix init endian vendor check,
Florian Eckert
[PATCH v6 0/1] NAX (No Anonymous Execution) LSM,
Igor Zhbanov
[PATCH v7 ima-evm-utils 0/2] make default hash algorithm dynamic,
Bruno Meneguele
[PATCH] tpm: fix potential NULL pointer access in tpm_del_char_device(),
Lino Sanfilippo
[PATCH] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[PATCH ltp v2] IMA: Add tests for uid, gid, fowner, and fgroup options,
Alex Henrie
[PATCH linux rebase] ima: add gid support,
Alex Henrie
[PATCH v3 0/9] ima-evm-utils: Add support for signing with pkcs11 URIs,
Stefan Berger
- [PATCH v3 1/9] evmctl: Implement support for EVMCTL_KEY_PASSWORD environment variable, Stefan Berger
- [PATCH v3 2/9] evmctl: Handle failure to initialize the openssl engine, Stefan Berger
- [PATCH v3 5/9] evmctl: use the pkcs11 engine for pkcs11: prefixed URIs, Stefan Berger
- [PATCH v3 6/9] libimaevm: Add support for pkcs11 private keys for signing a v2 hash, Stefan Berger
- [PATCH v3 4/9] evmctl: Define and use an ENGINE field in libimaevm_params, Stefan Berger
- [PATCH v3 3/9] evmctl: Implement function for setting up an OpenSSL engine, Stefan Berger
- [PATCH v3 9/9] tests: Get the packages for pkcs11 testing on the CI/CD system, Stefan Berger
- [PATCH v3 7/9] tests: Import softhsm_setup script to enable pkcs11 test case, Stefan Berger
- [PATCH v3 8/9] tests: Extend sign_verify test with pkcs11-specific test, Stefan Berger
- Re: [PATCH v3 0/9] ima-evm-utils: Add support for signing with pkcs11 URIs, Mimi Zohar
[PATCH] tpm/tpm_i2c_infineon: Fix init endian vendor check,
Florian Eckert
[PATCH v6] tpm: fix Atmel TPM crash caused by too frequent queries,
Hao Wu
[PATCH] tpm: Check for integer overflow in tpm2_map_response_body(),
Dan Carpenter
[PATCH v5 00/12] Enroll kernel keys thru MOK,
Eric Snowberg
- [PATCH v5 04/12] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v5 07/12] KEYS: Introduce link restriction to include builtin, secondary and machine keys, Eric Snowberg
- [PATCH v5 03/12] KEYS: CA link restriction, Eric Snowberg
- [PATCH v5 05/12] integrity: add new keyring handler for mok keys, Eric Snowberg
- [PATCH v5 10/12] integrity: store reference to machine keyring, Eric Snowberg
- [PATCH v5 08/12] KEYS: integrity: change link restriction to trust the machine keyring, Eric Snowberg
- [PATCH v5 01/12] integrity: Introduce a Linux keyring called machine, Eric Snowberg
- [PATCH v5 11/12] integrity: Trust MOK keys if MokListTrustedRT found, Eric Snowberg
- [PATCH v5 06/12] KEYS: add a reference to machine keyring, Eric Snowberg
- [PATCH v5 02/12] integrity: Do not allow machine keyring updates following init, Eric Snowberg
- [PATCH v5 09/12] KEYS: link secondary_trusted_keys to machine trusted keys, Eric Snowberg
- [PATCH v5 12/12] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true, Eric Snowberg
- Re: [PATCH v5 00/12] Enroll kernel keys thru MOK, Jarkko Sakkinen
[PATCH ima-evm-utils v4] evmctl: Use secure heap for private keys and passwords,
Vitaly Chikunov
[PATCH v5 ima-evm-utils 0/2] make default hash algorithm dynamic,
Bruno Meneguele
IMA namespaces,
Denis Semakin
[GIT PULL] integrity subsystem updates for v5.15,
Mimi Zohar
[Index of Archives]
[Linux Kernel]
[Linux Kernel Hardening]
[Linux NFS]
[Linux NILFS]
[Linux USB Devel]
[Video for Linux]
[Linux SCSI]
[Yosemite Forum]
