Skip to content

RFC integrity service framework and provider

Mimi Zohar lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 RFC Latest6 patches 21 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/6integrity: new hooksinclude/linux/integrity.h security/integrity.c security/integrity_dummy.c +1 more+218 -109 replies
2/6integrity: fs hook placementfs/dcache.c fs/ext3/xattr_security.c fs/file_table.c +3 more+39 -09 replies
3/6integrity: EVM as an integrity service providerfs/namei.c security/Kconfig security/Makefile +7 more+1737 -01 reply
4/6integrity: IMA integrity_measure() supportsecurity/evm/Kconfig security/evm/Makefile security/evm/evm_integrity.h +8 more+840 -20 replies
5/6integrity: mtime patch for mmap filesfs/buffer.c fs/fs-writeback.c fs/inode.c +3 more+28 -111 reply
6/6integrity: TPM internal kernel interfacedrivers/char/tpm/tpm.c drivers/char/tpm/tpm.h include/linux/tpm.h+162 -41 reply

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [RFC][Patch 0/6] integrity service framework and provider

This is a request for comments for updates to the integrity service framework, previously accepted into -mm, and EVM a new integrity service provider. A new LSM module called Integrity Based Access Control(IBAC), a consumer of the integrity framework API, will be posted separately to the LSM mailing list.

A corresponding userspace utility package is available at
http://www.research.ibm.com/gsal/tcpa

Patch 1/6 integrity:new hooks
Patch 2/6 integrity:fs hook placement
Patch 3/6 integrity:EVM as an integrity service provider Patch 4/6 integrity:IMA integrity_measure() support Patch 5/6 integrity:mtime patch for mmap files Patch 6/6 integrity:TPM internal kernel interface

Read the cover letter in its thread