History

Commits on master to include/keys/system_keyring.h24

keys: drop shadowing dead prototypeChristian Göttsche committed 1 year ago5f56d41
integrity: PowerVM support for loading third party code signing keysNayna Jain committed 3 years ago44e69ea
KEYS: DigitalSignature link restrictionEric Snowberg committed 3 years ago4cfb908
certs: Factor out the blacklist hash creationMickaël Salaün committed 5 years ago141e523
KEYS: Introduce link restriction for machine keysEric Snowberg committed 4 years ago087aa4e
KEYS: store reference to machine keyringEric Snowberg committed 4 years ago56edb6c
Merge tag 'integrity-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds committed 5 years agoe6f0bf0
ima: enable loading of build time generated key on .ima keyringNayna Jain committed 5 years ago6cbdfb3
certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg committed 5 years ago56c5812
certs: Add wrapper function to check blacklisted binary hashNayna Jain committed 7 years ago2434f7d
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36Thomas Gleixner committed 7 years agob4d0d23
integrity, KEYS: add a reference to platform keyringKairui Song committed 7 years ago219a3e8
KEYS: Split role of the keyring pointer for keyring restrict functionsMat Martineau committed 10 years agoaaf66c8
KEYS: Add a system blacklist keyringDavid Howells committed 9 years ago734114f
IMA: Use the the system trusted keyrings instead of .ima_mokDavid Howells committed 10 years ago56104cf
certs: Add a secondary system keyring that can be added to dynamicallyDavid Howells committed 10 years agod3bfe84
KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTEDDavid Howells committed 10 years ago77f68ba
KEYS: Move the point of trust determination to __key_link()David Howells committed 10 years agoa511e1a
KEYS: Generalise system_verify_data() to provide access to internal contentDavid Howells committed 10 years agoe68503b
IMA: create machine owner and blacklist keyringsPetko Manolov committed 10 years ago41c89b6
PKCS#7: Appropriately restrict authenticated attributes and content typeDavid Howells committed 11 years ago99db443
MODSIGN: Extract the blob PKCS#7 signature verifier from module signingDavid Howells committed 11 years ago091f6e2
KEYS: verify a certificate is signed by a 'trusted' keyMimi Zohar committed 13 years ago3be4bea
KEYS: Separate the kernel signature checking keyring from module signingDavid Howells committed 13 years agob56e5a1