linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-12-29 20:36:26 -05:00

Files

Christoph Hellwig a7d3d0392a integrity: use kernel_read_file_from_path() to read x509 certs

The CONFIG_IMA_LOAD_X509 and CONFIG_EVM_LOAD_X509 options permit
loading x509 signed certificates onto the trusted keyrings without
verifying the x509 certificate file's signature.

This patch replaces the call to the integrity_read_file() specific
function with the common kernel_read_file_from_path() function.
To avoid verifying the file signature, this patch defines
READING_X509_CERTFICATE.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2017-11-08 15:16:36 -05:00

apparmor

Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2017-09-23 05:33:29 -10:00

integrity

integrity: use kernel_read_file_from_path() to read x509 certs

2017-11-08 15:16:36 -05:00

keys

fs: fix kernel_write prototype

2017-09-04 19:05:15 -04:00

loadpin

security: mark LSM hooks as __ro_after_init