Linux Integrity
[Prev Page][Next Page]
- Re: [RFC 3/3] ima: make the integrity inode cache per namespace, (continued)
- [PATCH v2 0/6] KEXEC_SIG with appended signature,
Michal Suchanek
- [PATCH v2 6/6] module: Move duplicate mod_check_sig users code to mod_parse_sig, Michal Suchanek
- [PATCH v2 5/6] module: Use key_being_used_for for log messages in verify_appended_signature, Michal Suchanek
- [PATCH v2 4/6] module: strip the signature marker in the verification function., Michal Suchanek
- [PATCH v2 3/6] kexec_file: Don't opencode appended signature verification., Michal Suchanek
- Re: [PATCH v2 0/6] KEXEC_SIG with appended signature, Heiko Carstens
- Re: [PATCH v2 0/6] KEXEC_SIG with appended signature, Baoquan He
- Re: [PATCH v2 0/6] KEXEC_SIG with appended signature, Philipp Rudo
- Re: [PATCH v2 0/6] KEXEC_SIG with appended signature, Nayna
RE: [RFC PATCH v7 11/16] ipe: add support for dm-verity as a trust provider,
Roberto Sassu
[PATCH v3 0/3] selftests: tpm2: Probe for available PCR bank,
Stefan Berger
[PATCH] ima: Fix trivial typos in the comments,
Austin Kim
[PATCH v5 0/2] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[PATCH] security:trusted_tpm2: Fix memory leak in tpm2_key_encode(),
Jianglei Nie
[PATCH v2 0/3] selftests: tpm2: Probe for available PCR bank,
Stefan Berger
[PATCH 1/3] selftest/kexec: fix "ignored null byte in input" warning,
Nageswara R Sastry
[PATCH v8 00/17] Enroll kernel keys thru MOK,
Eric Snowberg
- [PATCH v8 04/17] integrity: Do not allow machine keyring updates following init, Eric Snowberg
- [PATCH v8 07/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v8 05/17] X.509: Parse Basic Constraints for CA, Eric Snowberg
- [PATCH v8 06/17] KEYS: CA link restriction, Eric Snowberg
- [PATCH v8 03/17] integrity: Introduce a Linux keyring called machine, Eric Snowberg
- [PATCH v8 13/17] integrity: store reference to machine keyring, Eric Snowberg
- [PATCH v8 12/17] KEYS: integrity: change link restriction to trust the machine keyring, Eric Snowberg
- [PATCH v8 10/17] KEYS: add a reference to machine keyring, Eric Snowberg
- [PATCH v8 14/17] KEYS: link machine trusted keys to secondary_trusted_keys, Eric Snowberg
- [PATCH v8 02/17] integrity: Fix warning about missing prototypes, Eric Snowberg
- [PATCH v8 17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true, Eric Snowberg
- [PATCH v8 09/17] KEYS: Rename get_builtin_and_secondary_restriction, Eric Snowberg
- [PATCH v8 11/17] KEYS: Introduce link restriction for machine keys, Eric Snowberg
- [PATCH v8 15/17] efi/mokvar: move up init order, Eric Snowberg
- [PATCH v8 16/17] integrity: Trust MOK keys if MokListTrustedRT found, Eric Snowberg
- [PATCH v8 08/17] integrity: add new keyring handler for mok keys, Eric Snowberg
- [PATCH v8 01/17] KEYS: Create static version of public_key_verify_signature, Eric Snowberg
- Re: [PATCH v8 00/17] Enroll kernel keys thru MOK, Jarkko Sakkinen
[PATCH v30 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
[PATCH v30 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
[PATCH v30 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
[PATCH v30 11/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
[PATCH 0/2] selftests: tpm2: Probe for available PCR bank,
Stefan Berger
[PATCH v7 00/17] Enroll kernel keys thru MOK,
Eric Snowberg
- [PATCH v7 05/17] KEYS: CA link restriction, Eric Snowberg
- [PATCH v7 12/17] KEYS: integrity: change link restriction to trust the machine keyring, Eric Snowberg
- [PATCH v7 04/17] X.509: Parse Basic Constraints for CA, Eric Snowberg
- [PATCH v7 01/17] integrity: Introduce a Linux keyring called machine, Eric Snowberg
- [PATCH v7 06/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v7 02/17] integrity: Do not allow machine keyring updates following init, Eric Snowberg
- [PATCH v7 07/17] integrity: Fix warning about missing prototypes, Eric Snowberg
- [PATCH v7 13/17] KEYS: link secondary_trusted_keys to machine trusted keys, Eric Snowberg
- [PATCH v7 15/17] efi/mokvar: move up init order, Eric Snowberg
- [PATCH v7 14/17] integrity: store reference to machine keyring, Eric Snowberg
- [PATCH v7 16/17] integrity: Trust MOK keys if MokListTrustedRT found, Eric Snowberg
- [PATCH v7 10/17] KEYS: add a reference to machine keyring, Eric Snowberg
- [PATCH v7 11/17] KEYS: Introduce link restriction for machine keys, Eric Snowberg
- [PATCH v7 17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true, Eric Snowberg
- [PATCH v7 09/17] KEYS: Rename get_builtin_and_secondary_restriction, Eric Snowberg
- [PATCH v7 08/17] integrity: add new keyring handler for mok keys, Eric Snowberg
- [PATCH v7 03/17] KEYS: Create static version of public_key_verify_signature, Eric Snowberg
- Re: [PATCH v7 00/17] Enroll kernel keys thru MOK, Jarkko Sakkinen
[PATCH v17 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH] char: tpm: cr50_i2c: Drop if with an always false condition,
Uwe Kleine-König
[RFC][PATCH 0/5] shmem/fsverity: Prepare for mandatory integrity enforcement,
Roberto Sassu
[PATCH v4 0/2] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[PATCH v16 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[RFC PATCH] ima: differentiate overlay, pivot_root, and other pathnames,
Mimi Zohar
[PATCH] tpm_tis: Fix an error handling path in 'tpm_tis_core_init()',
Christophe JAILLET
[PATCH 0/2] Additional appended signature cleanup,
Michal Suchanek
ima-evm-utils: version 1.4 released,
Mimi Zohar
[PATCH RFC] integrity: disassociate ima_filter_rule from security_audit_rule,
Casey Schaufler
Disassociating ima_filter_rule* from security_audit_rule*,
Casey Schaufler
[PATCH v19 0/5] Add tpm i2c ptp driver,
amirmizi6
RE: [RFC PATCH v7 14/16] scripts: add boot policy generation program,
Roberto Sassu
RE: [RFC PATCH v7 04/16] ipe: add userspace interface,
Roberto Sassu
[PATCH ima-evm-utils] travis: use alt:sisyphus from docker.io,
Mimi Zohar
[PATCH v18 0/6] Add tpm i2c ptp driver,
amirmizi6
[GIT PULL] integrity subsystem updates for v5.16,
Mimi Zohar
[PATCH RESEND] KEYS: trusted: Fix trusted key backends when building as module,
andreas
IMA testsuite?,
Casey Schaufler
[PATCH v2] tpm: tpm_tis_spi_cr50: Add default RNG quality,
AngeloGioacchino Del Regno
[PATCH] evm: mark evm_fixmode as __ro_after_init,
Austin Kim
[RESEND PATCH] tpm: tpm_tis_spi_cr50: Add default RNG quality, AngeloGioacchino Del Regno
[PATCH] tpm: tpm_tis_spi_cr50: Add default RNG quality,
AngeloGioacchino Del Regno
[PATCH] ima/evm: mark evm_fixmode as __ro_after_init,
Austin Kim
[PATCH v3 0/2] use SM3 instead of SM3_256,
Tianjia Zhang
[PATCH ima-evm-utils 1/2] switch to using crun for podman,
Mimi Zohar
[GIT PULL] TPM DEVICE DRIVER changes for v5.16,
Jarkko Sakkinen
RE: [RFC PATCH v7 00/16] Integrity Policy Enforcement (IPE),
Roberto Sassu
[PATCH v17 0/6] Add tpm i2c ptp driver,
amirmizi6
RE: [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature,
Roberto Sassu
[PATCH v16 0/6] Add tpm i2c ptp driver,
amirmizi6
[PATCH v2 0/2] use SM3 instead of SM3_256,
Tianjia Zhang
[PATCH v1 1/3] ima: define ima_trusted_for hook,
Mimi Zohar
[PATCH 1/2] ima: define ima_trusted_for hook,
Mimi Zohar
[PATCH] tpm/st33zp24: drop unneeded over-commenting,
Sohaib Mohamed
[PATCH v15 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH v15 2/3] arch: Wire up trusted_for(2), Mickaël Salaün
[PATCH v2 00/20] Make some spi device drivers return zero in .remove(),
Uwe Kleine-König
[PATCH v2 1/1] tpm: add request_locality before write TPM_INT_ENABLE,
Chen Jun
[PATCH v2] tpm: ibmvtpm: Make use of dma_alloc_noncoherent(),
Cai Huoqing
[PATCH 13/13] tpm: st33zp24: Make st33zp24_remove() return void,
Uwe Kleine-König
[PATCH v4 0/5] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys,
Ahmad Fatoum
[PATCH] tpm: ibmvtpm: Make use of dma_alloc_coherent(),
Cai Huoqing
[PATCH 0/2] tpm: use SM3 instead of SM3_256,
Tianjia Zhang
[PATCH v14 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH v6 0/2] IMA checkpatch fixes,
Petr Vorel
[PATCH] tpm/st33zp24: Fix typo in st33zp24.c,
Sohaib Mohamed
[PATCH v3 1/2] ima: fix uid code style problems,
Alex Henrie
[PATCH v13 0/3] Add trusted_for(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH v8 0/3] IMA: Add tests for uid, gid, fowner, and fgroup options,
Petr Vorel
- [PATCH v8 1/3] IMA: Move check_policy_writable() to ima_setup.sh and rename it, Petr Vorel
- [PATCH v8 2/3] IMA: Move ima_check to ima_setup.sh, Petr Vorel
- [PATCH v8 3/3] IMA: Add tests for uid, gid, fowner, and fgroup options, Petr Vorel
- Re: [PATCH v8 0/3] IMA: Add tests for uid, gid, fowner, and fgroup options, Petr Vorel
[PATCH] IMA: make runtime measurement list pollable,
Daiki Ueno
[PATCH v2] ima: add gid support,
Alex Henrie
[PATCH v3] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[PATCH v6] tpm: Add Upgrade/Reduced mode support for TPM2 modules,
Borys Movchan
DIGLIM demo, Roberto Sassu
[RFC][PATCH 0/7] ima: Measure and appraise files with DIGLIM,
Roberto Sassu
[PATCH] spi: bcm2835: do not unregister controller in shutdown handler,
Lino Sanfilippo
[PATCH v29 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
[PATCH v29 13/28] IMA: Change internal interfaces to use lsmblobs, Casey Schaufler
[PATCH v29 12/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
[PATCH v29 11/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
[PATCH v29 10/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
[PATCH v29 05/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
[PATCH v2] tpm_tis_spi: Add missing SPI ID,
Mark Brown
[bug report] tpm/tpm_i2c_stm_st33: Split tpm_i2c_tpm_st33 in 2 layers (core + phy), Dan Carpenter
[PATCH] tpm_tis_spi: Add missing SPI ID,
Mark Brown
[PATCH ltp v7 1/3] IMA: Move check_policy_writable() to ima_setup.sh and rename it,
Alex Henrie
[PATCH v6 0/3] IMA: Add tests for uid, gid, fowner, and fgroup options,
Petr Vorel
[PATCH ltp v5 1/3] IMA: Move check_policy_writable to ima_setup.sh and rename it,
Alex Henrie
[PATCH ltp v4 1/3] IMA: Move check_policy_writable to ima_setup.sh and rename it,
Alex Henrie
[PATCH] tpm/eventlog: Don't abort tpm_read_log on faulty ACPI config,
Morten Linderud
[PATCH v2] integrity: support including firmware ".platform" keys at build time,
Nayna Jain
[RFC][PATCH 0/9] integrity: Introduce DIGLIM advanced features,
Roberto Sassu
[zohar-integrity:next-integrity-testing 1/1] security/integrity/ima/ima_policy.c:684:25: sparse: sparse: incompatible types in comparison expression (different address spaces):,
kernel test robot
[PATCH v6 00/13] Enroll kernel keys thru MOK,
Eric Snowberg
- [PATCH v6 01/13] integrity: Introduce a Linux keyring called machine, Eric Snowberg
- [PATCH v6 07/13] KEYS: add a reference to machine keyring, Eric Snowberg
- [PATCH v6 03/13] KEYS: CA link restriction, Eric Snowberg
- [PATCH v6 02/13] integrity: Do not allow machine keyring updates following init, Eric Snowberg
- [PATCH v6 05/13] integrity: add new keyring handler for mok keys, Eric Snowberg
- [PATCH v6 08/13] KEYS: Introduce link restriction for machine keys, Eric Snowberg
- [PATCH v6 12/13] integrity: Trust MOK keys if MokListTrustedRT found, Eric Snowberg
- [PATCH v6 04/13] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca, Eric Snowberg
- [PATCH v6 13/13] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true, Eric Snowberg
- [PATCH v6 06/13] KEYS: Rename get_builtin_and_secondary_restriction, Eric Snowberg
- [PATCH v6 10/13] KEYS: link secondary_trusted_keys to machine trusted keys, Eric Snowberg
- [PATCH v6 11/13] integrity: store reference to machine keyring, Eric Snowberg
- [PATCH v6 09/13] KEYS: integrity: change link restriction to trust the machine keyring, Eric Snowberg
- Re: [PATCH v6 00/13] Enroll kernel keys thru MOK, Jarkko Sakkinen
- Re: [PATCH v6 00/13] Enroll kernel keys thru MOK, Nayna
[PATCH v3 00/13] integrity: Introduce DIGLIM,
Roberto Sassu
- [PATCH v3 01/13] diglim: Overview, Roberto Sassu
- [PATCH v3 03/13] diglim: Objects, Roberto Sassu
- [PATCH v3 04/13] diglim: Methods, Roberto Sassu
- [PATCH v3 02/13] diglim: Basic definitions, Roberto Sassu
- [PATCH v3 05/13] diglim: Parser, Roberto Sassu
- [PATCH v3 06/13] diglim: IMA info, Roberto Sassu
- [PATCH v3 07/13] diglim: Interfaces - digest_list_add, digest_list_del, Roberto Sassu
- [PATCH v3 09/13] diglim: Interfaces - digest_list_label, Roberto Sassu
- [PATCH v3 08/13] diglim: Interfaces - digest_lists_loaded, Roberto Sassu
- [PATCH v3 10/13] diglim: Interfaces - digest_query, Roberto Sassu
- [PATCH v3 11/13] diglim: Interfaces - digests_count, Roberto Sassu
- [PATCH v3 12/13] diglim: Remote Attestation, Roberto Sassu
- [PATCH v3 13/13] diglim: Tests, Roberto Sassu
- RE: [PATCH v3 00/13] integrity: Introduce DIGLIM, Roberto Sassu
[PATCH ltp v3 1/2] IMA: Move check_policy_writable to ima_setup.sh and rename it,
Alex Henrie
[PATCH v15 0/6] Add tpm i2c ptp driver,
amirmizi6
[PATCH v4 0/9] ima-evm-utils: Add support for signing with pkcs11 URIs,
Stefan Berger
[Index of Archives]
[Linux Kernel]
[Linux Kernel Hardening]
[Linux NFS]
[Linux NILFS]
[Linux USB Devel]
[Video for Linux]
[Linux SCSI]
[Yosemite Forum]
