Stefan Berger 82bbd44719 evm: Enforce signatures version 3 with new EVM policy 'bit 3' ...

Enable the configuration of EVM so that it requires that asymmetric
signatures it accepts are of version 3 (sigv3). To enable this, introduce
bit 3 (value 0x0008) that the user may write to EVM's securityfs policy
configuration file 'evm' for sigv3 enforcement.

Mention bit 3 in the documentation.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2026-04-01 10:16:53 -04:00

..

evm

evm: Enforce signatures version 3 with new EVM policy 'bit 3'

2026-04-01 10:16:53 -04:00

ima

ima: add support to require IMA sigv3 signatures

2026-04-01 10:16:30 -04:00

platform_certs

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

digsig_asymmetric.c

integrity: Allow sigv3 verification on EVM_XATTR_PORTABLE_DIGSIG

2026-04-01 10:16:53 -04:00

digsig.c

ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures

2026-04-01 10:14:30 -04:00

efi_secureboot.c

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

iint.c

ima,evm: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

integrity_audit.c

integrity: check the return value of audit_log_start()

2022-02-02 11:44:23 -05:00

integrity.h

ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures

2026-04-01 10:14:30 -04:00

Kconfig

integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYS

2025-10-03 07:50:56 -04:00

Makefile

integrity: Eliminate weak definition of arch_get_secureboot()

2026-03-13 11:37:13 -04:00