Skip to content

integrity service framework and provider

Mimi Zohar lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest7 patches 19 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/7integrity: new hooksinclude/linux/integrity.h security/integrity.c security/integrity_dummy.c +1 more+232 -210 replies
2/7integrity: fs hook placementfs/dcache.c fs/ext3/xattr_security.c fs/file_table.c +3 more+39 -00 replies
3/7integrity: EVM as an integrity service providerfs/namei.c security/Kconfig security/Makefile +7 more+1742 -011 replies
4/7integrity: IMA integrity_measure() supportsecurity/evm/Kconfig security/evm/Makefile security/evm/evm_integrity.h +8 more+841 -22 replies
5/7integrity: mtime patch for mmap filesmm/mmap.c+5 -02 replies
6/7integrity: TPM internal kernel interfacedrivers/char/tpm/tpm.c drivers/char/tpm/tpm.h include/linux/tpm.h+283 -730 replies
7/7IBAC Patchsecurity/Kconfig security/Makefile security/ibac/Kconfig +2 more+172 -03 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [Patch 0/7] integrity service framework and provider

We have addressed the issues raised in the previous RFC postings and are now submitting these for your consideration.

This is a set of updates to the integrity service framework, previously accepted into -mm, EVM a new integrity service provider, and a new LSM module called Integrity Based Access Control(IBAC), a sample consumer of the integrity framework API.

A corresponding userspace utility package is available at
http://www.research.ibm.com/gsal/tcpa

Patch 1/7 integrity:new hooks
Patch 2/7 integrity:fs hook placement
Patch 3/7 integrity:EVM as an integrity service provider Patch 4/7 integrity:IMA integrity_measure() support Patch 5/7 integrity:mtime patch for mmap files Patch 6/7 integrity:TPM internal kernel interface Patch 7/7 integrity:Integrity Based Access Control(IBAC)