Mimi Zohar fed2512a7c ima: based on policy require signed firmware (sysfs fallback) ...

With an IMA policy requiring signed firmware, this patch prevents
the sysfs fallback method of loading firmware.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Cc: Luis R. Rodriguez <mcgrof@suse.com>
Cc: Matthew Garrett <mjg59@google.com>
Signed-off-by: James Morris <james.morris@microsoft.com>

2018-07-16 12:31:57 -07:00

..

apparmor

+ Features

2018-06-14 16:11:28 +09:00

integrity

ima: based on policy require signed firmware (sysfs fallback)

2018-07-16 12:31:57 -07:00

keys

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

loadpin

get rid of pointless includes of fs_struct.h

2018-02-22 14:28:50 -05:00

selinux

docs: Fix some broken references

2018-06-15 18:10:01 -03:00

smack

Merge branch 'smack-for-4.18' of https://github.com/cschaufler/next-smack into next-smack

2018-06-05 13:18:58 -07:00

tomoyo

net: make getname() functions return length rather than use int* parameter

2018-02-12 14:15:04 -05:00

yama

pids: introduce find_get_task_by_vpid() helper

2018-02-06 18:32:46 -08:00

commoncap.c

capabilities: Allow privileged user in s_user_ns to set security.* xattrs

2018-05-24 12:03:31 -05:00

device_cgroup.c

docs: fix broken references with multiple hints

2018-06-15 18:10:01 -03:00

inode.c

securityfs: add the ability to support symlinks

2017-06-08 12:51:43 -07:00

Kconfig

Currently, hardened usercopy performs dynamic bounds checking on slab

2018-02-03 16:25:42 -08:00

lsm_audit.c

audit: use inline function to get audit context

2018-05-14 17:24:18 -04:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

ima: based on policy require signed kexec kernel images

2018-07-16 12:31:57 -07:00