Linux Integrity

Date Index

Re: [PATCH V5] IMA: support for per policy rule template formats, (continued)
- Re: [PATCH V5] IMA: support for per policy rule template formats, Mimi Zohar
[RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
- [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
  - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Mike Snitzer
    - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Milan Broz
    - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
  - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Milan Broz
    - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
  - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Eric Biggers
    - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
      - Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Eric Biggers
        
        Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Milan Broz
        
        Re: [RFC PATCH v5 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
- Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Eric Biggers
  - Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
    - Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Eric Biggers
      - Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
  - Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., James Morris
    - Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Milan Broz
      - Re: [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
[PATCH V4] IMA: support for per policy rule template formats, Matthew Garrett
- Re: [PATCH V4] IMA: support for per policy rule template formats, Mimi Zohar
[PATCH v5 00/11] ima-evm-utils: Convert sign v2 from RSA to EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Vitaly Chikunov
  - Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Mimi Zohar
    - Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Vitaly Chikunov
      - Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Mimi Zohar
        
        Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Vitaly Chikunov
        
        Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Mimi Zohar
        
        Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Vitaly Chikunov
        
        Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Mimi Zohar
        
        Re: [PATCH v5 01/11] ima-evm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Vitaly Chikunov
- [PATCH v5 02/11] ima-evm-utils: Change read_pub_key to use EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 03/11] ima-evm-utils: Change read_priv_key to use EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 04/11] ima-evm-utils: Start converting calc keyid v2 to EVP_PKEY API, Vitaly Chikunov
  - Re: [PATCH v5 04/11] ima-evm-utils: Start converting calc keyid v2 to EVP_PKEY API, Mimi Zohar
- [PATCH v5 05/11] ima-evm-utils: Convert cmd_import to use EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Vitaly Chikunov
  - Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Mimi Zohar
    - Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Vitaly Chikunov
      - Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Mimi Zohar
        
        Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Vitaly Chikunov
        
        Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Mimi Zohar
        
        Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Mimi Zohar
        
        Re: [PATCH v5 06/11] ima-evm-utils: Start converting find_keyid to use EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 07/11] ima-evm-utils: Convert verify_hash_v2 to EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 08/11] ima-evm-utils: Finish conversion of find_keyid to EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 09/11] ima-evm-utils: Convert sign_hash_v2 to use EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 10/11] ima-evm-utils: Finish converting calc keyid v2 to EVP_PKEY API, Vitaly Chikunov
- [PATCH v5 11/11] ima-evm-utils: Remove RSA_ASN1_templates, Vitaly Chikunov
[PATCH] ima: dynamically allocate shash_desc, Arnd Bergmann
- Re: [PATCH] ima: dynamically allocate shash_desc, Mimi Zohar
  - Re: [PATCH] ima: dynamically allocate shash_desc, Mimi Zohar
    - Re: [PATCH] ima: dynamically allocate shash_desc, Arnd Bergmann
      - Re: [PATCH] ima: dynamically allocate shash_desc, Mimi Zohar
        
        Re: [PATCH] ima: dynamically allocate shash_desc, Arnd Bergmann
        
        Re: [PATCH] ima: dynamically allocate shash_desc, Mimi Zohar
[tytso@xxxxxxx: Re: [PATCH v4 03/16] fs-verity: add UAPI header], Theodore Ts'o
[PATCH v5 0/2] fTPM: firmware TPM running in TEE, Sasha Levin
- [PATCH v5 2/2] fTPM: add documentation for ftpm driver, Sasha Levin
- [PATCH v5 1/2] fTPM: firmware TPM running in TEE, Sasha Levin
  - Re: [PATCH v5 1/2] fTPM: firmware TPM running in TEE, Ilias Apalodimas
[PATCH v4 00/14] ima: introduce IMA Digest Lists extension, Roberto Sassu
- [PATCH v4 01/14] ima: read hash algorithm from security.ima even if appraisal is not enabled, Roberto Sassu
- [PATCH v4 02/14] ima: generalize ima_read_policy(), Roberto Sassu
- [PATCH v4 03/14] ima: generalize ima_write_policy() and raise uploaded data size limit, Roberto Sassu
- [PATCH v4 04/14] ima: generalize policy file operations, Roberto Sassu
- [PATCH v4 05/14] ima: use ima_show_htable_value to show violations and hash table data, Roberto Sassu
- [PATCH v4 06/14] ima: add parser of compact digest list, Roberto Sassu
- [PATCH v4 07/14] ima: restrict upload of converted digest lists, Roberto Sassu
- [PATCH v4 08/14] ima: prevent usage of digest lists that are not measured/appraised, Roberto Sassu
- [PATCH v4 09/14] ima: introduce new securityfs files, Roberto Sassu
- [PATCH v4 10/14] ima: load parser digests and execute the parser at boot time, Roberto Sassu
- [PATCH v4 11/14] ima: add support for measurement with digest lists, Roberto Sassu
- [PATCH v4 12/14] ima: add support for appraisal with digest lists, Roberto Sassu
- [PATCH v4 13/14] ima: introduce new policies initrd and appraise_initrd, Roberto Sassu
- [PATCH v4 14/14] ima: add Documentation/security/IMA-digest-lists.txt, Roberto Sassu
- Re: [PATCH v4 00/14] ima: introduce IMA Digest Lists extension, Roberto Sassu
  - Re: [PATCH v4 00/14] ima: introduce IMA Digest Lists extension, Roberto Sassu
    - Re: [PATCH v4 00/14] ima: introduce IMA Digest Lists extension, Mimi Zohar
      - Re: [PATCH v4 00/14] ima: introduce IMA Digest Lists extension, Roberto Sassu
[PATCH v4 0/5] ima-avm-utils: Convert sign v2 from RSA to EVP_PKEY API, Vitaly Chikunov
- [PATCH v4 1/5] ima-avm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Vitaly Chikunov
  - Re: [PATCH v4 1/5] ima-avm-utils: Make sure sig buffer is always MAX_SIGNATURE_SIZE, Mimi Zohar
- [PATCH v4 2/5] ima-avm-utils: Change read_pub_key to use EVP_PKEY API, Vitaly Chikunov
- [PATCH v4 3/5] ima-avm-utils: Change read_priv_key to use EVP_PKEY API, Vitaly Chikunov
  - Re: [PATCH v4 3/5] ima-avm-utils: Change read_priv_key to use EVP_PKEY API, Mimi Zohar
- [PATCH v4 5/5] ima-avm-utils: Remove RSA_ASN1_templates, Vitaly Chikunov
- [PATCH v4 4/5] ima-evm-utils: Convert sign v2 from RSA to EVP_PKEY API, Vitaly Chikunov
  - Re: [PATCH v4 4/5] ima-evm-utils: Convert sign v2 from RSA to EVP_PKEY API, Mimi Zohar
    - Re: [PATCH v4 4/5] ima-evm-utils: Convert sign v2 from RSA to EVP_PKEY API, Vitaly Chikunov
      - Re: [PATCH v4 4/5] ima-evm-utils: Convert sign v2 from RSA to EVP_PKEY API, Mimi Zohar
- Re: [PATCH v4 0/5] ima-avm-utils: Convert sign v2 from RSA to EVP_PKEY API, Vitaly Chikunov
[PATCH 0/2] powerpc/powernv: expose secure variables to userspace, Nayna Jain
- [PATCH 1/2] powerpc/powernv: add OPAL APIs for secure variables, Nayna Jain
- [PATCH 2/2] powerpc: expose secure variables via sysfs, Nayna Jain
  - Re: [PATCH 2/2] powerpc: expose secure variables via sysfs, Greg Kroah-Hartman
    - Re: [PATCH 2/2] powerpc: expose secure variables via sysfs, Nayna
  - Re: [PATCH 2/2] powerpc: expose secure variables via sysfs, Michael Ellerman
    - Re: [PATCH 2/2] powerpc: expose secure variables via sysfs, Nayna
      - Re: [PATCH 2/2] powerpc: expose secure variables via sysfs, Oliver O'Halloran
  - Re: [PATCH 2/2] powerpc: expose secure variables via sysfs, Oliver O'Halloran
[PATCH 0/8] tpm: Add driver for cr50, Stephen Boyd
- [PATCH 3/8] tpm_tis_spi: add max xfer size, Stephen Boyd
  - Re: [PATCH 3/8] tpm_tis_spi: add max xfer size, Jarkko Sakkinen
- [PATCH 8/8] tpm: add legacy sysfs attributes for tpm2, Stephen Boyd
  - Re: [PATCH 8/8] tpm: add legacy sysfs attributes for tpm2, Jason Gunthorpe
- [PATCH 6/8] tpm: Add driver for cr50 on I2C, Stephen Boyd
- [PATCH 7/8] tpm: add sysfs attributes for tpm2, Stephen Boyd
  - Re: [PATCH 7/8] tpm: add sysfs attributes for tpm2, Jason Gunthorpe
  - Re: [PATCH 7/8] tpm: add sysfs attributes for tpm2, Jarkko Sakkinen
- [PATCH 5/8] tpm: add driver for cr50 on SPI, Stephen Boyd
- [PATCH 4/8] dt-bindings: tpm: document properties for cr50, Stephen Boyd
  - Re: [PATCH 4/8] dt-bindings: tpm: document properties for cr50, Rob Herring
- [PATCH 2/8] tpm_tis_core: add optional max xfer size check, Stephen Boyd
  - Re: [PATCH 2/8] tpm_tis_core: add optional max xfer size check, Jarkko Sakkinen
- [PATCH 1/8] tpm: block messages while suspended, Stephen Boyd
  - Re: [PATCH 1/8] tpm: block messages while suspended, Jason Gunthorpe
    - Re: [PATCH 1/8] tpm: block messages while suspended, Stephen Boyd
      - Re: [PATCH 1/8] tpm: block messages while suspended, Jason Gunthorpe
        
        Re: [PATCH 1/8] tpm: block messages while suspended, Stephen Boyd
        
        Re: [PATCH 1/8] tpm: block messages while suspended, Herbert Xu
        
        Re: [PATCH 1/8] tpm: block messages while suspended, Stephen Boyd
  - Re: [PATCH 1/8] tpm: block messages while suspended, Jarkko Sakkinen
    - Re: [PATCH 1/8] tpm: block messages while suspended, Stephen Boyd
      - Re: [PATCH 1/8] tpm: block messages while suspended, Jarkko Sakkinen
[PATCH V8 0/3] Add support for measuring the boot command line during kexec_file_load, Prakhar Srivastava
- [PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args, Prakhar Srivastava
  - Re: [PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args, Mimi Zohar
    - Re: [PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args, Dave Young
      - Re: [PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args, Mimi Zohar
  - Re: [PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args, James Morris
  - Re: [PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args, Mimi Zohar
- [PATCH V8 2/3] Define a new ima template field buf, Prakhar Srivastava
  - Re: [PATCH V8 2/3] Define a new ima template field buf, James Morris
  - Re: [PATCH V8 2/3] Define a new ima template field buf, Mimi Zohar
    - Re: [PATCH V8 2/3] Define a new ima template field buf, Mimi Zohar
      - Re: [PATCH V8 2/3] Define a new ima template field buf, Mimi Zohar
        
        Re: [PATCH V8 2/3] Define a new ima template field buf, prakhar srivastava
- [PATCH V8 1/3] Define a new IMA hook to measure the boot command line arguments, Prakhar Srivastava
  - Re: [PATCH V8 1/3] Define a new IMA hook to measure the boot command line arguments, James Morris
  - Re: [PATCH V8 1/3] Define a new IMA hook to measure the boot command line arguments, Mimi Zohar
    - Re: [PATCH V8 1/3] Define a new IMA hook to measure the boot command line arguments, prakhar srivastava
- Re: [PATCH V8 0/3] Add support for measuring the boot command line during kexec_file_load, Mimi Zohar
  - Re: [PATCH V8 0/3] Add support for measuring the boot command line during kexec_file_load, prakhar srivastava
- <Possible follow-ups>
- [PATCH V8 0/3] Add support for measuring the boot command line during kexec_file_load, Prakhar Srivastava
  - [PATCH 2/3] IMA:Define a new template field buf, Prakhar Srivastava
    - Re: [PATCH 2/3] IMA:Define a new template field buf, Mimi Zohar
      - Re: [PATCH 2/3] IMA:Define a new template field buf, prakhar srivastava
        
        Re: [PATCH 2/3] IMA:Define a new template field buf, Mimi Zohar
  - [PATCH 3/3] KEXEC:Call ima_kexec_cmdline to measure the boot command line args, Prakhar Srivastava
  - [PATCH 1/3] IMA:Define a new hook to measure the kexec boot command line arguments, Prakhar Srivastava
    - Re: [PATCH 1/3] IMA:Define a new hook to measure the kexec boot command line arguments, Mimi Zohar
- [PATCH V8 0/3] Add support for measuring the boot command line during kexec_file_load, Prakhar Srivastava
  - [PATCH V9 3/3] KEXEC:Call ima_kexec_cmdline to measure the boot command line args, Prakhar Srivastava
  - [PATCH V9 1/3] IMA:Define a new hook to measure the kexec boot command line arguments, Prakhar Srivastava
    - Re: [PATCH V9 1/3] IMA:Define a new hook to measure the kexec boot command line arguments, prakhar srivastava
  - [PATCH V9 2/3] IMA:Define a new template field buf, Prakhar Srivastava
[RFC PATCH v4 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
- [RFC PATCH v4 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
  - Re: [RFC PATCH v4 1/1] Add dm verity root hash pkcs7 sig validation., Milan Broz
    - Re: [RFC PATCH v4 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Singh Khurana
- <Possible follow-ups>
- [RFC PATCH v4 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
  - [RFC PATCH v4 1/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
[PATCH v4 0/4] LTP reproducer on broken IMA on overlayfs, Petr Vorel
- [PATCH v4 1/4] ima: Call test's cleanup inside ima_setup.sh cleanup, Petr Vorel
- [PATCH v4 3/4] ima/ima_measurements.sh: Require builtin IMA tcb policy, Petr Vorel
  - Re: [PATCH v4 3/4] ima/ima_measurements.sh: Require builtin IMA tcb policy, Ignaz Forster
- [PATCH v4 4/4] ima: Add overlay test + doc, Petr Vorel
  - Re: [PATCH v4 4/4] ima: Add overlay test + doc, Ignaz Forster
    - Re: [PATCH v4 4/4] ima: Add overlay test + doc, Petr Vorel
      - Re: [PATCH v4 4/4] ima: Add overlay test + doc, Ignaz Forster
        
        Re: [PATCH v4 4/4] ima: Add overlay test + doc, Petr Vorel
        
        Re: [LTP] [PATCH v4 4/4] ima: Add overlay test + doc, Petr Vorel
- [PATCH v4 2/4] shell: Add $TST_DEVICE as default parameter to tst_umount, Petr Vorel
[RFC 0/7] Introduce TEE based Trusted Keys support, Sumit Garg
- [RFC 7/7] MAINTAINERS: Add entry for TEE based Trusted Keys, Sumit Garg
- [RFC 6/7] doc: keys: Document usage of TEE based Trusted Keys, Sumit Garg
  - Re: [RFC 6/7] doc: keys: Document usage of TEE based Trusted Keys, Jarkko Sakkinen
    - Re: [RFC 6/7] doc: keys: Document usage of TEE based Trusted Keys, Sumit Garg
      - Re: [RFC 6/7] doc: keys: Document usage of TEE based Trusted Keys, Jarkko Sakkinen
- [RFC 5/7] KEYS: encrypted: Allow TEE based trusted master keys, Sumit Garg
- [RFC 4/7] KEYS: trusted: Introduce TEE based Trusted Keys, Sumit Garg
  - Re: [RFC 4/7] KEYS: trusted: Introduce TEE based Trusted Keys, Jarkko Sakkinen
    - Re: [RFC 4/7] KEYS: trusted: Introduce TEE based Trusted Keys, Sumit Garg
- [RFC 3/7] tee: add private login method for kernel clients, Sumit Garg
  - Re: [RFC 3/7] tee: add private login method for kernel clients, Jens Wiklander
    - Re: [RFC 3/7] tee: add private login method for kernel clients, Sumit Garg
      - Re: [RFC 3/7] tee: add private login method for kernel clients, Jens Wiklander
        
        Re: [RFC 3/7] tee: add private login method for kernel clients, Sumit Garg
        
        Re: [RFC 3/7] tee: add private login method for kernel clients, Jens Wiklander
        
        Re: [RFC 3/7] tee: add private login method for kernel clients, Sumit Garg
- [RFC 2/7] tee: enable support to register kernel memory, Sumit Garg
  - Re: [RFC 2/7] tee: enable support to register kernel memory, Jarkko Sakkinen
    - Re: [RFC 2/7] tee: enable support to register kernel memory, Sumit Garg
  - Re: [RFC 2/7] tee: enable support to register kernel memory, Jens Wiklander
- [RFC 1/7] tee: optee: allow kernel pages to register as shm, Sumit Garg
  - Re: [RFC 1/7] tee: optee: allow kernel pages to register as shm, Jarkko Sakkinen
    - Re: [RFC 1/7] tee: optee: allow kernel pages to register as shm, Jarkko Sakkinen
      - Re: [RFC 1/7] tee: optee: allow kernel pages to register as shm, Jarkko Sakkinen
        
        Re: [RFC 1/7] tee: optee: allow kernel pages to register as shm, Sumit Garg
  - Re: [RFC 1/7] tee: optee: allow kernel pages to register as shm, Jens Wiklander
- Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Casey Schaufler
  - Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Mimi Zohar
    - Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Sumit Garg
  - Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Sumit Garg
- Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Sumit Garg
  - Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Jens Wiklander
    - Re: [RFC 0/7] Introduce TEE based Trusted Keys support, Sumit Garg
[PATCH] tpm: Fix null pointer dereference on chip register error path, Milan Broz
- Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, James Morris
- Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Sasha Levin
  - Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Milan Broz
- Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Milan Broz
  - Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Jarkko Sakkinen
    - Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Jarkko Sakkinen
      - [PATCH v2] tpm: Fix null pointer dereference on chip register error path, Milan Broz
        
        Re: [PATCH v2] tpm: Fix null pointer dereference on chip register error path, Jarkko Sakkinen
        
        Re: [PATCH v2] tpm: Fix null pointer dereference on chip register error path, Jarkko Sakkinen
      - Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Jarkko Sakkinen
        
        Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Milan Broz
        
        Re: [PATCH] tpm: Fix null pointer dereference on chip register error path, Jarkko Sakkinen
[PATCH v2 1/2] LSM: switch to blocking policy update notifiers, Janne Karhunen
- [PATCH v2 1/2] ima: use the lsm policy update notifier, Janne Karhunen
  - Re: [PATCH v2 1/2] ima: use the lsm policy update notifier, Mimi Zohar
- Re: [PATCH v2 1/2] LSM: switch to blocking policy update notifiers, Mimi Zohar
  - Re: [PATCH v2 1/2] LSM: switch to blocking policy update notifiers, Paul Moore
- Re: [PATCH v2 1/2] LSM: switch to blocking policy update notifiers, James Morris
[PATCH v3 0/4] LTP reproducer on broken IMA on overlayfs, Petr Vorel
- [PATCH v3 1/4] ima: Call test's cleanup inside ima_setup.sh cleanup, Petr Vorel
- [PATCH v3 2/4] shell: Add $TST_DEVICE as default parameter to tst_umount, Petr Vorel
- [PATCH v3 3/4] ima/ima_measurements.sh: Require builtin IMA tcb policy, Petr Vorel
  - Re: [PATCH v3 3/4] ima/ima_measurements.sh: Require builtin IMA tcb policy, Mimi Zohar
    - Re: [PATCH v3 3/4] ima/ima_measurements.sh: Require builtin IMA tcb policy, Petr Vorel
- [PATCH v3 4/4] ima: Add overlay test + doc, Petr Vorel
[PATCH v4 0/3] powerpc: Enabling IMA arch specific secure boot policies, Nayna Jain
- [PATCH v4 1/3] powerpc/powernv: Add OPAL API interface to get secureboot state, Nayna Jain
- [PATCH v4 2/3] powerpc/powernv: detect the secure boot mode of the system, Nayna Jain
- [PATCH v4 3/3] powerpc: Add support to initialize ima policy rules, Nayna Jain
[PATCH -next] ima: Make arch_policy_entry static, YueHaibing
- Re: [PATCH -next] ima: Make arch_policy_entry static, Mimi Zohar
[PATCH v11 00/13] Appended signatures support for IMA appraisal, Thiago Jung Bauermann
- [PATCH v11 01/13] MODSIGN: Export module signature definitions, Thiago Jung Bauermann
  - Re: [PATCH v11 01/13] MODSIGN: Export module signature definitions, Thiago Jung Bauermann
- [PATCH v11 02/13] PKCS#7: Refactor verify_pkcs7_signature(), Thiago Jung Bauermann
  - Re: [PATCH v11 02/13] PKCS#7: Refactor verify_pkcs7_signature(), Thiago Jung Bauermann
- [PATCH v11 03/13] PKCS#7: Introduce pkcs7_get_digest(), Thiago Jung Bauermann
- [PATCH v11 04/13] integrity: Introduce struct evm_xattr, Thiago Jung Bauermann
- [PATCH v11 06/13] ima: Use designated initializers for struct ima_event_data, Thiago Jung Bauermann
- [PATCH v11 07/13] ima: Add modsig appraise_type option for module-style appended signatures, Thiago Jung Bauermann
- [PATCH v11 08/13] ima: Factor xattr_verify() out of ima_appraise_measurement(), Thiago Jung Bauermann
- [PATCH v11 10/13] ima: Collect modsig, Thiago Jung Bauermann
- [PATCH v11 09/13] ima: Implement support for module-style appended signatures, Thiago Jung Bauermann
- [PATCH v11 05/13] integrity: Select CONFIG_KEYS instead of depending on it, Thiago Jung Bauermann
- [PATCH v11 12/13] ima: Store the measurement again when appraising a modsig, Thiago Jung Bauermann
- [PATCH v11 13/13] ima: Allow template= option for appraise rules as well, Thiago Jung Bauermann
- [PATCH v11 11/13] ima: Define ima-modsig template, Thiago Jung Bauermann
[PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Douglas Anderson
- Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
  - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
    - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Doug Anderson
      - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
- <Possible follow-ups>
- [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Douglas Anderson
  - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jason Gunthorpe
    - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Doug Anderson
    - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Greg KH
      - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jason Gunthorpe
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Greg KH
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Doug Anderson
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Greg KH
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Doug Anderson
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Greg KH
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
    - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
      - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jason Gunthorpe
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jason Gunthorpe
        
        Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Doug Anderson
  - Re: [PATCH] tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations, Jarkko Sakkinen
[PATCH v3 0/3] powerpc: Enabling IMA arch specific secure boot policies, Nayna Jain
- [PATCH v3 1/3] powerpc/powernv: Add OPAL API interface to get secureboot state, Nayna Jain
  - Re: [PATCH v3 1/3] powerpc/powernv: Add OPAL API interface to get secureboot state, Daniel Axtens
    - Message not available
      - Re: [PATCH v3 1/3] powerpc/powernv: Add OPAL API interface to get secureboot state, Daniel Axtens
        
        Re: [PATCH v3 1/3] powerpc/powernv: Add OPAL API interface to get secureboot state, Nayna
        
        Re: [PATCH v3 1/3] powerpc/powernv: Add OPAL API interface to get secureboot state, Daniel Axtens
- [PATCH v3 2/3] powerpc/powernv: detect the secure boot mode of the system, Nayna Jain
- [PATCH v3 3/3] powerpc: Add support to initialize ima policy rules, Nayna Jain
  - Re: [PATCH v3 3/3] powerpc: Add support to initialize ima policy rules, Satheesh Rajendran
    - Re: [PATCH v3 3/3] powerpc: Add support to initialize ima policy rules, Nayna
[PATCH 0/2] Fix write leases on overlayfs, Amir Goldstein
- [PATCH 1/2] vfs: replace i_readcount with a biased i_count, Amir Goldstein
  - Re: [PATCH 1/2] vfs: replace i_readcount with a biased i_count, Miklos Szeredi
  - Re: [PATCH 1/2] vfs: replace i_readcount with a biased i_count, Mimi Zohar
    - Re: [PATCH 1/2] vfs: replace i_readcount with a biased i_count, Amir Goldstein
      - Re: [PATCH 1/2] vfs: replace i_readcount with a biased i_count, J . Bruce Fields
        
        Re: [PATCH 1/2] vfs: replace i_readcount with a biased i_count, Amir Goldstein
      - Re: [PATCH 1/2] vfs: replace i_readcount with a biased i_count, Mimi Zohar
- [PATCH 2/2] locks: eliminate false positive conflicts for write lease, Amir Goldstein
[RFC PATCH v3 0/1] Add dm verity root hash pkcs7 sig validation., Jaskaran Khurana
- [RFC PATCH v3 1/1] Add dm verity root hash pkcs7 sig validation, Jaskaran Khurana
  - Re: [RFC PATCH v3 1/1] Add dm verity root hash pkcs7 sig validation, Milan Broz
    - Re: [RFC PATCH v3 1/1] Add dm verity root hash pkcs7 sig validation, Jaskaran Singh Khurana
    - Re: [RFC PATCH v3 1/1] Add dm verity root hash pkcs7 sig validation, Jaskaran Singh Khurana
    - Re: [RFC PATCH v3 1/1] Add dm verity root hash pkcs7 sig validation, James Morris
- Re: [RFC PATCH v3 0/1] Add dm verity root hash pkcs7 sig validation., Milan Broz
[PATCH V2 1/2] Abstract out support for locating an EFI config table, Matthew Garrett
- [PATCH V2 2/2] tpm: Don't duplicate events from the final event log in the TCG2 log, Matthew Garrett
  - Re: [PATCH V2 2/2] tpm: Don't duplicate events from the final event log in the TCG2 log, Ard Biesheuvel
    - Re: [PATCH V2 2/2] tpm: Don't duplicate events from the final event log in the TCG2 log, Jarkko Sakkinen
      - Re: [PATCH V2 2/2] tpm: Don't duplicate events from the final event log in the TCG2 log, Ard Biesheuvel
  - Re: [PATCH V2 2/2] tpm: Don't duplicate events from the final event log in the TCG2 log, Jarkko Sakkinen
- Re: [PATCH V2 1/2] Abstract out support for locating an EFI config table, Ard Biesheuvel
- Re: [PATCH V2 1/2] Abstract out support for locating an EFI config table, Jarkko Sakkinen
  - Re: [PATCH V2 1/2] Abstract out support for locating an EFI config table, Matthew Garrett
    - Re: [PATCH V2 1/2] Abstract out support for locating an EFI config table, Jarkko Sakkinen
- Re: [PATCH V2 1/2] Abstract out support for locating an EFI config table, Jarkko Sakkinen
[PATCH] x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICY, Nayna Jain
[PATCH v3 11/20] docs: security: trusted-encrypted.rst: fix code-block tag, Mauro Carvalho Chehab
[PATCH v7 0/3] add new ima hook ima_kexec_cmdline to measure kexec boot cmdline args, Prakhar Srivastava
- [PATCH v7 1/3] Add a new ima hook ima_kexec_cmdline to measure cmdline args, Prakhar Srivastava
- [PATCH v7 2/3] add a new ima template field buf, Prakhar Srivastava
- [PATCH v7 3/3] call ima_kexec_cmdline to measure the cmdline args, Prakhar Srivastava
- Re: [PATCH v7 0/3] add new ima hook ima_kexec_cmdline to measure kexec boot cmdline args, Mimi Zohar
  - Re: [PATCH v7 0/3] add new ima hook ima_kexec_cmdline to measure kexec boot cmdline args, prakhar srivastava
[PATCH v4 00/16] fs-verity: read-only file-based authenticity protection, Eric Biggers
- [PATCH v4 06/16] fs-verity: add inode and superblock fields, Eric Biggers
  - Re: [PATCH v4 06/16] fs-verity: add inode and superblock fields, Theodore Ts'o
- [PATCH v4 07/16] fs-verity: add the hook for file ->open(), Eric Biggers
  - Re: [PATCH v4 07/16] fs-verity: add the hook for file ->open(), Theodore Ts'o
    - Re: [PATCH v4 07/16] fs-verity: add the hook for file ->open(), Eric Biggers
- [PATCH v4 09/16] fs-verity: add data verification hooks for ->readpages(), Eric Biggers
  - Re: [PATCH v4 09/16] fs-verity: add data verification hooks for ->readpages(), Theodore Ts'o
- [PATCH v4 15/16] ext4: add fs-verity read support, Eric Biggers
- [PATCH v4 13/16] fs-verity: support builtin file signatures, Eric Biggers
  - Re: [PATCH v4 13/16] fs-verity: support builtin file signatures, Theodore Ts'o
    - Re: [PATCH v4 13/16] fs-verity: support builtin file signatures, Eric Biggers
- [PATCH v4 14/16] ext4: add basic fs-verity support, Eric Biggers
  - Re: [PATCH v4 14/16] ext4: add basic fs-verity support, Theodore Ts'o
    - Re: [PATCH v4 14/16] ext4: add basic fs-verity support, Eric Biggers
      - Re: [PATCH v4 14/16] ext4: add basic fs-verity support, Theodore Ts'o
        
        Re: [PATCH v4 14/16] ext4: add basic fs-verity support, Eric Biggers
        
        Re: [PATCH v4 14/16] ext4: add basic fs-verity support, Theodore Ts'o
        
        Re: [PATCH v4 14/16] ext4: add basic fs-verity support, Eric Biggers
- [PATCH v4 16/16] f2fs: add fs-verity support, Eric Biggers
- [PATCH v4 11/16] fs-verity: implement FS_IOC_MEASURE_VERITY ioctl, Eric Biggers
  - Re: [PATCH v4 11/16] fs-verity: implement FS_IOC_MEASURE_VERITY ioctl, Theodore Ts'o
- [PATCH v4 10/16] fs-verity: implement FS_IOC_ENABLE_VERITY ioctl, Eric Biggers
  - Re: [PATCH v4 10/16] fs-verity: implement FS_IOC_ENABLE_VERITY ioctl, Theodore Ts'o
    - Re: [PATCH v4 10/16] fs-verity: implement FS_IOC_ENABLE_VERITY ioctl, Eric Biggers
- [PATCH v4 12/16] fs-verity: add SHA-512 support, Eric Biggers
  - Re: [PATCH v4 12/16] fs-verity: add SHA-512 support, Theodore Ts'o
- [PATCH v4 05/16] fs-verity: add Kconfig and the helper functions for hashing, Eric Biggers
  - Re: [PATCH v4 05/16] fs-verity: add Kconfig and the helper functions for hashing, Theodore Ts'o
    - Re: [PATCH v4 05/16] fs-verity: add Kconfig and the helper functions for hashing, Eric Biggers
- [PATCH v4 08/16] fs-verity: add the hook for file ->setattr(), Eric Biggers
  - Re: [PATCH v4 08/16] fs-verity: add the hook for file ->setattr(), Theodore Ts'o
- [PATCH v4 01/16] fs-verity: add a documentation file, Eric Biggers
  - Re: [PATCH v4 01/16] fs-verity: add a documentation file, Theodore Ts'o
    - Re: [PATCH v4 01/16] fs-verity: add a documentation file, Eric Biggers
- [PATCH v4 04/16] fs: uapi: define verity bit for FS_IOC_GETFLAGS, Eric Biggers
  - Re: [PATCH v4 04/16] fs: uapi: define verity bit for FS_IOC_GETFLAGS, Theodore Ts'o
- [PATCH v4 02/16] fs-verity: add MAINTAINERS file entry, Eric Biggers
  - Re: [PATCH v4 02/16] fs-verity: add MAINTAINERS file entry, Theodore Ts'o
- [PATCH v4 03/16] fs-verity: add UAPI header, Eric Biggers
- Re: [PATCH v4 00/16] fs-verity: read-only file-based authenticity protection, Linus Torvalds
  - Re: [PATCH v4 00/16] fs-verity: read-only file-based authenticity protection, Eric Biggers
[PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
- [PATCH v3 1/2] evm: add option to set a random HMAC key at early boot, Roberto Sassu
- [PATCH v3 2/2] ima: add enforce-evm and log-evm modes to strictly check EVM status, Roberto Sassu
  - Re: [PATCH v3 2/2] ima: add enforce-evm and log-evm modes to strictly check EVM status, Mimi Zohar
    - Re: [PATCH v3 2/2] ima: add enforce-evm and log-evm modes to strictly check EVM status, Roberto Sassu
      - Re: [PATCH v3 2/2] ima: add enforce-evm and log-evm modes to strictly check EVM status, Mimi Zohar
        
        Re: [PATCH v3 2/2] ima: add enforce-evm and log-evm modes to strictly check EVM status, Roberto Sassu
        
        Re: [PATCH v3 2/2] ima: add enforce-evm and log-evm modes to strictly check EVM status, Mimi Zohar
- Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
  - Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Mimi Zohar
    - Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
- Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Janne Karhunen
  - Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
    - Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Janne Karhunen
      - Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
        
        Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Janne Karhunen
        
        Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
        
        Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Janne Karhunen
        
        Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
        
        Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Janne Karhunen
        
        Re: [PATCH v3 0/2] ima/evm fixes for v5.2, Roberto Sassu
[PATCH 2/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
[PATCH 1/2] [IMA] Measure public keys of BuiltIn Trusted Keys - Query public key of given key, Lakshmi
[PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
- Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Mimi Zohar
  - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
- Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Ken Goldman
  - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
    - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
    - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Mimi Zohar
      - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Mimi Zohar
        
        Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Jordan Hand
        
        Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Mimi Zohar
    - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Ken Goldman
      - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
      - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Matthew Garrett
  - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Jordan Hand
    - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Ken Goldman
      - Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Jordan Hand
        
        Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
        
        Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
        
        Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Mimi Zohar
        
        Re: [PATCH 0/2] [IMA] Measure public keys of BuiltIn Trusted Keys, Lakshmi
[PATCH] efi: Fix TPM code build failure on ARM, Matthew Garrett
- Re: [PATCH] efi: Fix TPM code build failure on ARM, Ard Biesheuvel
  - Re: [PATCH] efi: Fix TPM code build failure on ARM, Matthew Garrett
    - Re: [PATCH] efi: Fix TPM code build failure on ARM, Ard Biesheuvel
- Re: [PATCH] efi: Fix TPM code build failure on ARM, Jarkko Sakkinen
[PATCH V2] tpm: Don't duplicate events from the final event log in the TCG2 log, Matthew Garrett
- Re: [PATCH V2] tpm: Don't duplicate events from the final event log in the TCG2 log, Jarkko Sakkinen
- Re: [PATCH V2] tpm: Don't duplicate events from the final event log in the TCG2 log, Ard Biesheuvel
[PATCH 0/1] Fix crash in __calc_tpm2_event_size, Chris Coulson
- [PATCH 1/1] tpm: Don't dereference event after it's unmapped in __calc_tpm2_event_size, Chris Coulson
  - Re: [PATCH 1/1] tpm: Don't dereference event after it's unmapped in __calc_tpm2_event_size, Jarkko Sakkinen
- Re: [PATCH 0/1] Fix crash in __calc_tpm2_event_size, Jarkko Sakkinen
[PATCH V4] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
- Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
  - Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
    - Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
      - Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
        
        Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
        
        Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
        
        Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
  - Re: [PATCH V4] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
[PATCH] tpm: Don't duplicate events from the final event log in the TCG2 log, Matthew Garrett
- Re: [PATCH] tpm: Don't duplicate events from the final event log in the TCG2 log, Jarkko Sakkinen
evmctl and Hardware Security Module, Martin Townsend
- Re: evmctl and Hardware Security Module, Martin Townsend
[PATCH v2 14/22] docs: security: trusted-encrypted.rst: fix code-block tag, Mauro Carvalho Chehab
[PATCH V3] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
- Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
  - Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
  - Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
    - Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
      - Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
        
        Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
        
        Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
  - Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
    - Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
- Re: [PATCH V3] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
[PATCH] Add support to carry ima buffer to in kexec_file_load for amr64, Prakhar Srivastava
[GIT PULL] integrity subsystem fixes for v5.2, Mimi Zohar
- Re: [GIT PULL] integrity subsystem fixes for v5.2, pr-tracker-bot
[PATCH 1/2] LSM: switch to blocking policy update notifiers, Janne Karhunen
- [PATCH 2/2] ima: use the lsm policy update notifier, Janne Karhunen
  - Re: [PATCH 2/2] ima: use the lsm policy update notifier, Stephen Smalley
    - Re: [PATCH 2/2] ima: use the lsm policy update notifier, Janne Karhunen
- Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Paul Moore
- <Possible follow-ups>
- [PATCH 1/2] LSM: switch to blocking policy update notifiers, Janne Karhunen
  - Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Casey Schaufler
    - Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Janne Karhunen
      - Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Casey Schaufler
        
        Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Paul Moore
        
        Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, James Morris
        
        Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Paul Moore
        
        Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, James Morris
        
        Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Janne Karhunen
  - [PATCH 2/2] ima: use the lsm policy update notifier, Janne Karhunen
    - Re: [PATCH 2/2] ima: use the lsm policy update notifier, Mimi Zohar
      - Re: [PATCH 2/2] ima: use the lsm policy update notifier, Mimi Zohar
  - Re: [PATCH 1/2] LSM: switch to blocking policy update notifiers, Paul Moore
[PATCH v4 0/2] fTPM: firmware TPM running in TEE, Sasha Levin
- [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Sasha Levin
  - Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Sumit Garg
    - Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Sasha Levin
      - Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Sumit Garg
        
        Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Sasha Levin
        
        Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Ilias Apalodimas
        
        Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Sumit Garg
    - Re: [PATCH v4 1/2] fTPM: firmware TPM running in TEE, Jarkko Sakkinen
- [PATCH v4 2/2] fTPM: add documentation for ftpm driver, Sasha Levin
  - Re: [PATCH v4 2/2] fTPM: add documentation for ftpm driver, Randy Dunlap
- Re: [PATCH v4 0/2] fTPM: firmware TPM running in TEE, Jarkko Sakkinen
  - Re: [PATCH v4 0/2] fTPM: firmware TPM running in TEE, Sasha Levin
    - Re: [PATCH v4 0/2] fTPM: firmware TPM running in TEE, Jarkko Sakkinen
[PATCH 00/22] Some documentation fixes, Mauro Carvalho Chehab
- [PATCH 18/22] docs: security: trusted-encrypted.rst: fix code-block tag, Mauro Carvalho Chehab
  - Re: [PATCH 18/22] docs: security: trusted-encrypted.rst: fix code-block tag, James Morris
  - Re: [PATCH 18/22] docs: security: trusted-encrypted.rst: fix code-block tag, Jarkko Sakkinen
[PATCH] ima: use struct_size() in kzalloc(), Gustavo A. R. Silva
- Re: [PATCH] ima: use struct_size() in kzalloc(), Gustavo A. R. Silva
  - Re: [PATCH] ima: use struct_size() in kzalloc(), Mimi Zohar
    - Re: [PATCH] ima: use struct_size() in kzalloc(), Gustavo A. R. Silva
  - Re: [PATCH] ima: use struct_size() in kzalloc(), Mimi Zohar
    - Re: [PATCH] ima: use struct_size() in kzalloc(), Gustavo A. R. Silva
[PATCH v2 0/3] ima/evm fixes for v5.2, Roberto Sassu
- [PATCH v2 1/3] evm: check hash algorithm passed to init_desc(), Roberto Sassu
  - Re: [PATCH v2 1/3] evm: check hash algorithm passed to init_desc(), Mimi Zohar
- [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Roberto Sassu
  - Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Mimi Zohar
    - Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Roberto Sassu
      - Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Mimi Zohar
      - Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, James Bottomley
        
        Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Chuck Lever
        
        Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Roberto Sassu
        
        Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, James Bottomley
        
        Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, Roberto Sassu
        
        Re: [PATCH v2 2/3] ima: don't ignore INTEGRITY_UNKNOWN EVM status, James Bottomley
- [PATCH v2 3/3] ima: show rules with IMA_INMASK correctly, Roberto Sassu
  - Re: [PATCH v2 3/3] ima: show rules with IMA_INMASK correctly, Mimi Zohar
[PATCH V2] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
- Re: [PATCH V2] IMA: Allow profiles to define the desired IMA template, Roberto Sassu
  - Re: [PATCH V2] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
- Re: [PATCH V2] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
  - Re: [PATCH V2] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
[PATCH v3 00/15] fs-verity: read-only file-based authenticity protection, Eric Biggers
- [PATCH v3 02/15] fs-verity: add MAINTAINERS file entry, Eric Biggers
- [PATCH v3 01/15] fs-verity: add a documentation file, Eric Biggers
- [PATCH v3 03/15] fs-verity: add UAPI header, Eric Biggers
- [PATCH v3 05/15] fs-verity: add inode and superblock fields, Eric Biggers
- [PATCH v3 13/15] ext4: add basic fs-verity support, Eric Biggers
- [PATCH v3 14/15] ext4: add fs-verity read support, Eric Biggers
- [PATCH v3 15/15] f2fs: add fs-verity support, Eric Biggers
- [PATCH v3 12/15] fs-verity: support builtin file signatures, Eric Biggers
- [PATCH v3 10/15] fs-verity: implement FS_IOC_MEASURE_VERITY ioctl, Eric Biggers
- [PATCH v3 11/15] fs-verity: add SHA-512 support, Eric Biggers
- [PATCH v3 09/15] fs-verity: implement FS_IOC_ENABLE_VERITY ioctl, Eric Biggers
- [PATCH v3 08/15] fs-verity: add data verification hooks for ->readpages(), Eric Biggers
- [PATCH v3 06/15] fs-verity: add the hook for file ->open(), Eric Biggers
- [PATCH v3 07/15] fs-verity: add the hook for file ->setattr(), Eric Biggers
- [PATCH v3 04/15] fs-verity: add Kconfig and the helper functions for hashing, Eric Biggers
- Re: [PATCH v3 00/15] fs-verity: read-only file-based authenticity protection, Eric Biggers
[USER][PATCH] cpio: add option to add file metadata in copy-out mode, Roberto Sassu
[PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL, Dmitry Eremin-Solenikov
- [PATCH 3/4] ima-evm-utils: include hash-info.gen into distribution, Dmitry Eremin-Solenikov
- [PATCH 2/4] ima-evm-utils: replace INCLUDES with AM_CPPFLAGS, Dmitry Eremin-Solenikov
- [PATCH 4/4] ima-evm-utils: update .gitignore files, Dmitry Eremin-Solenikov
- Re: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL, Mimi Zohar
  - Re: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL, Dmitry Eremin-Solenikov
- Re: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL, Vitaly Chikunov
  - Re: [PATCH 1/4] ima-evm-utils: link to libcrypto instead of OpenSSL, Vitaly Chikunov
[PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
- [PATCH v4 1/3] initramfs: add file metadata, Roberto Sassu
  - Re: [PATCH v4 1/3] initramfs: add file metadata, Eugeniu Rosca
- [PATCH v4 2/3] initramfs: read metadata from special file METADATA!!!, Roberto Sassu
  - Re: [PATCH v4 2/3] initramfs: read metadata from special file METADATA!!!, Mimi Zohar
- [PATCH v4 3/3] gen_init_cpio: add support for file metadata, Roberto Sassu
  - Re: [PATCH v4 3/3] gen_init_cpio: add support for file metadata, Mimi Zohar
  - Re: [PATCH v4 3/3] gen_init_cpio: add support for file metadata, Eugeniu Rosca
  - Re: [PATCH v4 3/3] gen_init_cpio: add support for file metadata, Eugeniu Rosca
    - RE: [PATCH v4 3/3] gen_init_cpio: add support for file metadata, Roberto Sassu
      - Re: [PATCH v4 3/3] gen_init_cpio: add support for file metadata, Eugeniu Rosca
- Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
  - Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Rob Landley
    - Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
      - Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Mimi Zohar
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Mimi Zohar
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Eugeniu Rosca
        
        RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Eugeniu Rosca
        
        RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Eugeniu Rosca
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Jim Baxter
        
        RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Jim Baxter
        
        RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Rob Landley
        
        RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Rob Landley
        
        RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Jim Baxter
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Rob Landley
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Rob Landley
        
        Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Rob Landley
- Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Mimi Zohar
- Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Alexander Lobakin
  - RE: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
- Re: [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk, Eugeniu Rosca
[PATCH] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
- Re: [PATCH] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
[PATCH V4 0/5] Allow FUSE to provide IMA hashes directly, Matthew Garrett
- [PATCH V4 1/5] VFS: Add a call to obtain a file's hash, Matthew Garrett
- [PATCH V4 2/5] IMA: Allow rule matching on filesystem subtype, Matthew Garrett
- [PATCH V4 3/5] IMA: Optionally make use of filesystem-provided hashes, Matthew Garrett
- [PATCH V4 4/5] FUSE: Allow filesystems to provide gethash methods, Matthew Garrett
- [PATCH V4 5/5] IMA: Add a ima-vfs-sig measurement template, Matthew Garrett
CAP_SYS_ADMIN requirement for updating IMA metadata, Chuck Lever
- Re: CAP_SYS_ADMIN requirement for updating IMA metadata, Mimi Zohar
  - Re: CAP_SYS_ADMIN requirement for updating IMA metadata, Chuck Lever
    - Re: CAP_SYS_ADMIN requirement for updating IMA metadata, Mimi Zohar
      - Re: CAP_SYS_ADMIN requirement for updating IMA metadata, Chuck Lever
        
        Re: CAP_SYS_ADMIN requirement for updating IMA metadata, Mimi Zohar
sleep in selinux_audit_rule_init, Janne Karhunen
- Re: sleep in selinux_audit_rule_init, Stephen Smalley
  - Re: sleep in selinux_audit_rule_init, Janne Karhunen
  - Re: sleep in selinux_audit_rule_init, Stephen Smalley
    - Re: sleep in selinux_audit_rule_init, Mimi Zohar
      - Re: sleep in selinux_audit_rule_init, Stephen Smalley
        
        Re: sleep in selinux_audit_rule_init, Mimi Zohar
        
        Re: sleep in selinux_audit_rule_init, Casey Schaufler
        
        Re: sleep in selinux_audit_rule_init, Stephen Smalley
        
        Re: sleep in selinux_audit_rule_init, Janne Karhunen
        
        Re: sleep in selinux_audit_rule_init, Stephen Smalley
        
        Re: sleep in selinux_audit_rule_init, Paul Moore
        
        Re: sleep in selinux_audit_rule_init, Janne Karhunen
        
        Re: sleep in selinux_audit_rule_init, Stephen Smalley
        
        Re: sleep in selinux_audit_rule_init, Janne Karhunen
[PATCH v6 0/3] add new ima hook ima_kexec_cmdline to measure kexec boot cmdline args, Prakhar Srivastava
- [PATCH v6 2/3] add a new ima template field buf, Prakhar Srivastava
  - Re: [PATCH v6 2/3] add a new ima template field buf, Roberto Sassu
  - Re: [PATCH v6 2/3] add a new ima template field buf, Mimi Zohar
    - Re:, Roberto Sassu
      - Re:, Roberto Sassu
        
        Re: Re:, Mimi Zohar
        
        Re: Re:, prakhar srivastava
        
        Re: Re:, Mimi Zohar
- [PATCH v6 3/3] call ima_kexec_cmdline to measure the cmdline args, Prakhar Srivastava
- [PATCH v6 1/3] Add a new ima hook ima_kexec_cmdline to measure cmdline args, Prakhar Srivastava
  - Re: [PATCH v6 1/3] Add a new ima hook ima_kexec_cmdline to measure cmdline args, Mimi Zohar
[PATCH V7 0/4] Add support for crypto agile logs, Matthew Garrett
- [PATCH V7 2/4] tpm: Reserve the TPM final events table, Matthew Garrett
  - Re: [PATCH V7 2/4] tpm: Reserve the TPM final events table, Ard Biesheuvel
  - Re: [PATCH V7 2/4] tpm: Reserve the TPM final events table, Joe Richey
- [PATCH V7 4/4] efi: Attempt to get the TCG2 event log in the boot stub, Matthew Garrett
  - Re: [PATCH V7 4/4] efi: Attempt to get the TCG2 event log in the boot stub, Ard Biesheuvel
- [PATCH V7 3/4] tpm: Append the final event log to the TPM event log, Matthew Garrett
- [PATCH V7 1/4] tpm: Abstract crypto agile event size calculations, Matthew Garrett
- Re: [PATCH V7 0/4] Add support for crypto agile logs, Jarkko Sakkinen
- Re: [PATCH V7 0/4] Add support for crypto agile logs, Jarkko Sakkinen
  - Re: [PATCH V7 0/4] Add support for crypto agile logs, Jarkko Sakkinen
    - Re: [PATCH V7 0/4] Add support for crypto agile logs, James Morris
      - Re: [PATCH V7 0/4] Add support for crypto agile logs, Jarkko Sakkinen
        
        Re: [PATCH V7 0/4] Add support for crypto agile logs, James Morris
        
        Re: [PATCH V7 0/4] Add support for crypto agile logs, Jarkko Sakkinen
- Re: [PATCH V7 0/4] Add support for crypto agile logs, Bartosz Szczepanek
- Re: [PATCH V7 0/4] Add support for crypto agile logs, Joe Richey
[PATCH] x86/ima: check EFI SetupMode too, Mimi Zohar
- <Possible follow-ups>
- [PATCH] x86/ima: check EFI SetupMode too, Mimi Zohar
[PATCH V6 0/4] Add support for crypto agile TPM event logs, Matthew Garrett
- [PATCH V6 2/4] tpm: Reserve the TPM final events table, Matthew Garrett
- [PATCH V6 4/4] efi: Attempt to get the TCG2 event log in the boot stub, Matthew Garrett
  - Re: [PATCH V6 4/4] efi: Attempt to get the TCG2 event log in the boot stub, Ard Biesheuvel
- [PATCH V6 1/4] tpm: Abstract crypto agile event size calculations, Matthew Garrett
- [PATCH V6 3/4] tpm: Append the final event log to the TPM event log, Matthew Garrett
- Re: [PATCH V6 0/4] Add support for crypto agile TPM event logs, Bartosz Szczepanek
[PATCH V3 0/6] IMA: Support asking the VFS for a file hash, Matthew Garrett
- [PATCH V3 1/6] VFS: Add a call to obtain a file's hash, Matthew Garrett
  - Re: [PATCH V3 1/6] VFS: Add a call to obtain a file's hash, kbuild test robot
  - Re: [PATCH V3 1/6] VFS: Add a call to obtain a file's hash, Johannes Thumshirn
- [PATCH V3 2/6] FUSE: Allow filesystems to provide gethash methods, Matthew Garrett
- [PATCH V3 3/6] IMA: Allow rule matching on filesystem subtype, Matthew Garrett
- [PATCH V3 4/6] IMA: Optionally make use of filesystem-provided hashes, Matthew Garrett
- [PATCH V3 5/6] IMA: Add a ima-vfs-sig measurement template, Matthew Garrett
  - Re: [PATCH V3 5/6] IMA: Add a ima-vfs-sig measurement template, kbuild test robot
- [PATCH V3 6/6] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
  - Re: [PATCH V3 6/6] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
    - Re: [PATCH V3 6/6] IMA: Allow profiles to define the desired IMA template, Matthew Garrett
      - Re: [PATCH V3 6/6] IMA: Allow profiles to define the desired IMA template, Mimi Zohar
        
        Re: [PATCH V3 6/6] IMA: Allow profiles to define the desired IMA template, prakhar srivastava
[PATCH v3 0/2] initramfs: add support for xattrs in the initial ram disk, Roberto Sassu
- [PATCH v3 1/2] initramfs: set extended attributes, Roberto Sassu
- [PATCH v3 2/2] initramfs: introduce do_readxattrs(), Roberto Sassu
  - Re: [PATCH v3 2/2] initramfs: introduce do_readxattrs(), hpa

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux SCSI] [Yosemite Forum]