Code

History

Commits on upstream to security/ipe34
  1. treewide: change inode->i_ino from unsigned long to u64Jeff Layton committed 8 months ago0b2600f
  2. Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds committed 8 months agobf4afc5
  3. treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook committed 8 months ago69050f8
  4. kernel.h: drop hex.h and update all hex.h usersRandy Dunlap committed 11 months ago24c7763
  5. Merge tag 'ipe-pr-20251202' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipeLinus Torvalds committed 11 months agoc832183
  6. Merge tag 'integrity-v6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds committed 11 months ago777f817
  7. ipe: Add AT_EXECVE_CHECK support for script enforcementYanzhu Huang committed 1 year ago6767818
  8. ipe: Drop a duplicated CONFIG_ prefix in the ifdefferyBorislav Petkov (AMD) committed 1 year ago864468a
  9. ima: Access decompressed kernel module to verify appended signatureCoiby Xu committed 11 months agoc200892
  10. ipe: move initcalls to the LSM frameworkPaul Moore committed 1 year agod934f97
  11. lsm: replace the name field with a pointer to the lsm_id structPaul Moore committed 1 year ago9f9dc69
  12. Merge tag 'ipe-pr-20250728' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipeLinus Torvalds committed 1 year agob4efd62
  13. ipe: use SHA-256 library API instead of crypto_shash APIEric Biggers committed 1 year agob90bb6d
  14. ipe: don't bother with removal of files in directory we'll be removingAl Viro committed 1 year ago5be998a
  15. ipe: add errno field to IPE policy load auditingJasjiv Singh committed 1 year ago1d887d6
  16. ipe: policy_fs: fix kernel-doc warningsRandy Dunlap committed 1 year ago6df401a
  17. ipe: fallback to platform keyring also if key in trusted keyring is rejectedLuca Boccassi committed 2 years agof40998a
  18. ipe: allow secondary and platform keyrings to install/update policiesLuca Boccassi committed 2 years ago02e2f9a
  19. ipe: also reject policy updates with the same versionLuca Boccassi committed 2 years ago5ceecb3
  20. ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower versionLuca Boccassi committed 2 years ago5799418
  21. ipe: Add missing terminator to list of unit testsGuenter Roeck committed 2 years agof89722f
  22. ipe: Remove duplicated include in ipe.cYang Li committed 2 years agof5dafb8
  23. ipe: kunit test for parserDeven Bowers committed 2 years ago10ca05a
  24. scripts: add boot policy generation programDeven Bowers committed 2 years agoba199dc
  25. ipe: enable support for fs-verity as a trust providerFan Wu committed 2 years ago31f8c86
  26. ipe: add support for dm-verity as a trust providerDeven Bowers committed 2 years agoe155858
  27. ipe: add permissive toggleDeven Bowers committed 2 years agoa68916e
  28. audit,ipe: add IPE auditing supportDeven Bowers committed 2 years agof44554b
  29. ipe: add userspace interfaceDeven Bowers committed 2 years ago2261306
  30. ipe: introduce 'boot_verified' as a trust providerFan Wu committed 2 years agoa8a74df
  31. ipe: add LSM hooks on execution and kernel readDeven Bowers committed 2 years ago52443cb
  32. ipe: add evaluation loopDeven Bowers committed 2 years ago05a3516
  33. ipe: add policy parserDeven Bowers committed 2 years ago54a88cd
  34. lsm: add IPE lsmDeven Bowers committed 2 years ago0311507