integrity: few EVM patches
Get series with b4
b4 am [email protected]Versions newest first
- v3 Latest6 patches 9 repliesIn review
Patches in v3 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/6 | integrity: define '.evm' as a builtin 'trusted' keyringsecurity/ security/ security/ +4 more | +35 | 4 replies | |
| 2/6 | evm: load x509 certificate from the kernelsecurity/ security/ security/ +1 more | +33 | 0 replies | |
| 3/6 | evm: enable EVM when X509 certificate is loadedsecurity/ security/ security/ +1 more | +12 | 2 replies | |
| 4/6 | evm: provide a function to set EVM key from the kernelinclude/ security/ security/ | +50 | 2 replies | |
| 5/6 | evm: define EVM key max and min sizesinclude/ security/ | +6 | 0 replies | |
| 6/6 | evm: reset EVM status when file attributes changessecurity/ | +13 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v3 yet.
Cover letter [PATCHv3 0/6] integrity: few EVM patches
Hi,
IMA module provides functionality to load x509 certificates into the trusted '.ima' keyring. This is patchset adds the same functionality to the EVM as well. Also it provides functionality to set EVM key from the kernel crypto HW driver. This is an update for the patchset which was previously sent for review few months ago. Please refer to the patch descriptions for details.
BR,
Dmitry
Dmitry Kasatkin (6):
integrity: define '.evm' as a builtin 'trusted' keyring
evm: load x509 certificate from the kernel
evm: enable EVM when X509 certificate is loaded
evm: provide a function to set EVM key from the kernel
evm: define EVM key max and min sizes
evm: reset EVM status when file attributes changes
include/linux/evm.h | 10 +++++++ security/integrity/Kconfig | 11 ++++++++ security/integrity/digsig.c | 14 ++++++++-- security/integrity/evm/Kconfig | 17 ++++++++++++ security/integrity/evm/evm.h | 3 +++ security/integrity/evm/evm_crypto.c | 54 ++++++++++++++++++++++++++++++------- security/integrity/evm/evm_main.c | 32 +++++++++++++++++++--- security/integrity/evm/evm_secfs.c | 12 +++------ security/integrity/iint.c | 1 + security/integrity/ima/Kconfig | 5 +++- security/integrity/ima/ima.h | 12 --------- security/integrity/ima/ima_init.c | 2 +- security/integrity/integrity.h | 13 ++++++--- 13 files changed, 146 insertions(+), 40 deletions(-)
Signature · 1 line
2.1.4