Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Josh Boyer 38bd94b8a1 hibernate: Disable when the kernel is locked down ... There is currently no way to verify the resume image when returning from hibernate. This might compromise the signed modules trust model, so until we can work with signed hibernate images we disable it when the kernel is locked down. Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Matthew Garrett <mjg59@google.com> Reviewed-by: Kees Cook <keescook@chromium.org> Cc: rjw@rjwysocki.net Cc: pavel@ucw.cz cc: linux-pm@vger.kernel.org Signed-off-by: James Morris <jmorris@namei.org>		2019-08-19 21:54:15 -07:00
..
apparmor
integrity	kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE	2019-08-19 21:54:15 -07:00
keys
loadpin
lockdown	hibernate: Disable when the kernel is locked down	2019-08-19 21:54:15 -07:00
safesetid
selinux	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
smack	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
tomoyo
yama	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
commoncap.c
device_cgroup.c
inode.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
Kconfig	security: Add a static lockdown policy LSM	2019-08-19 21:54:15 -07:00
Kconfig.hardening
lsm_audit.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
Makefile	security: Add a static lockdown policy LSM	2019-08-19 21:54:15 -07:00
min_addr.c
security.c	security: Add a "locked down" LSM hook	2019-08-19 21:54:15 -07:00