Mimi Zohar
3323eec921
integrity: IMA as an integrity service provider ...
IMA provides hardware (TPM) based measurement and attestation for
file measurements. As the Trusted Computing (TPM) model requires,
IMA measures all files before they are accessed in any way (on the
integrity_bprm_check, integrity_path_check and integrity_file_mmap
hooks), and commits the measurements to the TPM. Once added to the
TPM, measurements can not be removed.
In addition, IMA maintains a list of these file measurements, which
can be used to validate the aggregate value stored in the TPM. The
TPM can sign these measurements, and thus the system can prove, to
itself and to a third party, the system's integrity in a way that
cannot be circumvented by malicious or compromised software.
- alloc ima_template_entry before calling ima_store_template()
- log ima_add_boot_aggregate() failure
- removed unused IMA_TEMPLATE_NAME_LEN
- replaced hard coded string length with #define name
Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
2009-02-06 09:05:30 +11:00
can: Fix CAN_(EFF|RTR)_FLAG handling in can_filter
2008-12-03 15:52:35 -08:00
NLM: allow lockd requests from an unprivileged port
2008-12-23 15:21:38 -05:00
ASoC: Add WM8350 AudioPlus codec driver
2008-12-18 17:21:07 +00:00
mlx4_core: Add support for multiple completion event vectors
2008-12-22 07:15:03 -08:00
netfilter: ctnetlink: fix missing CTA_NAT_SEQ_UNSPEC
2008-12-16 01:19:41 -08:00
netfilter: ip{,6}t_policy.h should include xp_policy.h
2008-11-20 15:59:56 +01:00
netfilter: ip{,6}t_policy.h should include xp_policy.h
2008-11-20 15:59:56 +01:00
nfsd: support callbacks with gss flavors
2008-12-23 16:19:00 -05:00
Merge branch 'devel' into next
2008-12-30 16:51:43 -05:00
USB: fix comment about endianness of descriptors
2008-12-17 10:49:14 -08:00
aio: make the lookup_ioctx() lockless
2008-12-29 08:29:50 +01:00
atm: 32-bit ioctl compatibility
2008-12-03 22:12:38 -08:00
atm: 32-bit ioctl compatibility
2008-12-03 22:12:38 -08:00
integrity: IMA as an integrity service provider
2009-02-06 09:05:30 +11:00
bio: add support for inlining a number of bio_vecs inside the bio
2008-12-29 08:29:50 +01:00
block: get rid of elevator_t typedef
2008-12-29 08:29:50 +01:00
blktrace: port to tracepoints
2008-11-26 12:13:34 +01:00
softirq: remove useless function __local_bh_enable
2008-11-28 12:38:38 +01:00
block: Supress Buffer I/O errors when SCSI REQ_QUIET flag set
2008-12-29 08:28:44 +01:00
CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3 ]
2009-01-07 09:38:48 +11:00
remove __ARCH_WANT_COMPAT_SYS_PTRACE
2008-11-30 11:00:15 -08:00
trace: profile all if conditionals
2008-11-23 11:41:01 +01:00
DRM: add mode setting support
2008-12-29 17:47:23 +10:00
cpuset: update top cpuset's mems after adding a node
2008-11-19 18:49:58 -08:00
libcrc32c: Add crc32c_le macro
2008-12-25 11:01:43 +11:00
User namespaces: set of cleanups (v2)
2008-11-24 18:57:41 -05:00
crypto: hash - Export shash through hash
2008-12-25 11:01:33 +11:00
net: add DCNA attribute to the BCN interface for DCB
2008-12-21 20:10:29 -08:00
dccp ccid-2: Phase out the use of boolean Ack Vector sysctl
2008-12-08 01:19:06 -08:00
DMI: add dmi_match
2008-12-29 07:39:34 -05:00
block: get rid of elevator_t typedef
2008-12-29 08:29:50 +01:00
eth: Declare an optimized compare_ether_addr_64bits() function
2008-11-23 23:24:32 -08:00
ethtool: Add GGRO and SGRO ops
2008-12-15 23:44:31 -08:00
SLUB: failslab support
2008-12-29 11:27:46 +02:00
fb: SH-5 uses __raw I/O accessors now also, drop the special casing.
2008-12-22 18:44:05 +09:00
fddi: convert to new network device ops
2008-11-20 20:29:48 -08:00
filter: add SKF_AD_NLATTR_NEST to look for nested attributes
2008-11-20 00:49:27 -08:00
[XFS] Fix merge failures
2008-12-29 16:47:18 +11:00
gianfar: Convert gianfar to an of_platform_driver
2008-12-16 15:29:15 -08:00
ftrace: enable format arguments checking
2008-12-21 09:46:45 +01:00
tracing/function-return-tracer: change the name into function-graph-tracer
2008-11-26 01:59:45 +01:00
futex: make clock selectable for FUTEX_WAIT_BITSET
2008-11-24 20:00:40 +01:00
block: add one-hit cache for disk partition lookup
2008-12-29 08:29:51 +01:00
Merge branch 'core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-30 16:10:19 -08:00
netdevice: Kill netdev->priv
2008-12-08 01:14:16 -08:00
Allow architectures to override copy_user_highpage()
2008-11-27 23:39:48 +00:00
hippi: convert driver to net_device_ops
2008-11-20 20:32:15 -08:00
hrtimer: removing all ur callback modes
2008-11-25 15:45:46 +01:00
ide: move Power Management support to ide-pm.c
2008-12-29 20:27:37 +01:00
lib/idr.c: fix rcu related race with idr_find
2008-12-01 19:55:25 -08:00
wireless: Incorrect LEAP authentication algorithm identifier.
2008-12-12 13:48:20 -05:00
Phonet: allocate separate ARP type for GPRS over a Phonet pipe
2008-12-17 15:47:48 -08:00
integrity: IMA as an integrity service provider
2009-02-06 09:05:30 +11:00
TPROXY: implemented IP_RECVORIGDSTADDR socket option
2008-11-16 19:32:39 -08:00
User namespaces: set of cleanups (v2)
2008-11-24 18:57:41 -05:00
Fix inotify watch removal/umount races
2008-11-15 12:26:44 -08:00
Merge branch 'topic/jack-mechanical' into to-push
2008-12-25 11:40:29 +01:00
Merge branch 'irq-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-30 16:20:19 -08:00
ipv6: Add IPV6_PKTINFO sticky option support to setsockopt()
2008-12-16 02:06:23 -08:00
Merge branches 'irq/sparseirq', 'irq/genirq' and 'irq/urgent'; commit 'v2.6.28' into irq/core
2008-12-25 16:27:54 +01:00
sparse irqs: handle !GENIRQ platforms
2008-12-12 12:28:50 +01:00
optimize attribute timeouts for "noac" and "actimeo=0"
2008-12-23 15:21:56 -05:00
sparse irqs: add irqnr.h to the user headers list
2008-12-12 12:29:10 +01:00
Merge branch 'core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-30 16:10:19 -08:00
sparse irq_desc[] array: core kernel and x86 changes
2008-12-08 14:31:51 +01:00
lguest: move the initial guest page table creation code to the host
2008-12-30 09:26:11 +10:30
libata: perform port detach in EH
2008-12-28 22:43:21 -05:00
i386: get rid of the use of KPROBE_ENTRY / KPROBE_END
2008-11-27 12:37:54 +01:00
rcu: Introduce hlist_nulls variant of hlist
2008-11-16 19:37:55 -08:00
Merge branch 'irq-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-30 16:20:19 -08:00
markers: comment marker_synchronize_unregister() on data dependency
2008-11-28 16:47:41 +01:00
phylib: make mdio-gpio work without OF (v4)
2008-11-16 18:59:45 -08:00
hotplug_memory_notifier section annotation
2008-11-30 10:03:38 -08:00
net: Refactor full duplex flow control resolution
2008-12-16 02:00:48 -08:00
Merge branch 'tracing-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-28 12:21:10 -08:00
aio: make the lookup_ioctx() lockless
2008-12-29 08:29:50 +01:00
netns: ip6mr: enable namespace support in ipv6 multicast forwarding code
2008-12-10 16:30:15 -08:00
x86, MSI: pass irq_cfg and irq_desc
2008-12-08 14:31:59 +01:00
reintroduce accept4
2008-11-19 18:49:57 -08:00
net: Remove unused netdev arg from some NAPI interfaces.
2008-12-22 20:43:12 -08:00
netlink: avoid memset of 0 bytes sparse warning
2008-11-20 04:08:29 -08:00
net: Add Generic Receive Offload infrastructure
2008-12-15 23:38:52 -08:00
optimize attribute timeouts for "noac" and "actimeo=0"
2008-12-23 15:21:56 -05:00
NFSv4: Remove nfs_client->cl_sem
2008-12-23 15:21:45 -05:00
NFS: add "[no]resvport" mount option
2008-12-23 15:21:37 -05:00
NFSv4: Convert the open and close ops to use fmode
2008-12-23 15:21:56 -05:00
mac80211: Fix HT channel selection
2008-12-19 15:22:54 -05:00
User namespaces: set of cleanups (v2)
2008-11-24 18:57:41 -05:00
of: Add helpers for finding device nodes which have a given property
2008-11-19 16:05:00 +11:00
of/gpio: Implement of_gpio_count()
2008-12-21 14:21:14 +11:00
of: Fix comment, sparc no longer uses of_device objects on special busses.
2008-12-04 09:16:45 -08:00
oprofile: update comment for oprofile_add_sample()
2008-12-10 14:20:03 +01:00
meminit section warnings
2008-11-30 10:03:35 -08:00
Merge branches 'x86/apic', 'x86/cleanups', 'x86/cpufeature', 'x86/crashdump', 'x86/debug', 'x86/defconfig', 'x86/detect-hyper', 'x86/doc', 'x86/dumpstack', 'x86/early-printk', 'x86/fpu', 'x86/idle', 'x86/io', 'x86/memory-corruption-check', 'x86/microcode', 'x86/mm', 'x86/mtrr', 'x86/nmi-watchdog', 'x86/pat2', 'x86/pci-ioapic-boot-irq-quirks', 'x86/ptrace', 'x86/quirks', 'x86/reboot', 'x86/setup-memory', 'x86/signal', 'x86/sparse-fixes', 'x86/time', 'x86/uv' and 'x86/xen' into x86/core
2008-12-23 16:27:23 +01:00
revert "percpu_counter: new function percpu_counter_sum_and_set"
2008-12-10 08:01:52 -08:00
phy: power management support
2008-11-28 16:24:56 -08:00
pid: fix the do_each_pid_task() macro
2008-12-04 09:09:37 +01:00
pkt_sched: add DRR scheduler
2008-11-20 04:10:00 -08:00
posix-timers: use "struct pid*" instead of "struct task_struct*"
2008-12-12 17:00:07 +01:00
x86, bts: add fork and exit handling
2008-12-20 09:15:46 +01:00
sparse irqs: handle !GENIRQ platforms
2008-12-12 12:28:50 +01:00
udp: Use hlist_nulls in UDP RCU code
2008-11-16 19:39:21 -08:00
rcu: Introduce hlist_nulls variant of hlist
2008-11-16 19:37:55 -08:00
Merge branch 'core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-30 16:10:19 -08:00
"Tree RCU": scalable classic RCU implementation
2008-12-18 21:56:04 +01:00
rfkill: strip pointless notifier chain
2008-12-12 14:45:25 -05:00
Merge branch 'oprofile-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-30 17:31:25 -08:00
rapidio: struct device - replace bus_id with dev_name(), dev_set_name()
2008-12-16 15:53:41 +11:00
ixgbe: this patch adds support for DCB to the kernel and ixgbe driver
2008-11-20 20:52:10 -08:00
Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-28 12:27:58 -08:00
CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3 ]
2009-01-07 09:38:48 +11:00
vfs, seqfile: make mangle_path() global
2008-11-23 09:45:39 +01:00
[ARM] S3C6400: serial support for S3C6400 and S3C6410 SoCs
2008-12-15 21:58:11 +00:00
net: Add skb_gro_receive
2008-12-15 23:42:33 -08:00
Merge branches 'topic/fixes', 'topic/cleanups' and 'topic/documentation' into for-linus
2008-12-29 11:45:47 +02:00
Define smp_call_function_many for UP
2008-12-15 16:28:57 -08:00
smsc911x: add dynamic bus configuration
2008-12-10 15:12:45 -08:00
tcp: add some mibs to track collapsing
2008-11-24 21:27:22 -08:00
tracing/stack-tracer: introduce CONFIG_USER_STACKTRACE_SUPPORT
2008-11-23 11:53:50 +01:00
swiotlb: add arch hook to force mapping
2008-12-17 18:58:13 +01:00
reintroduce accept4
2008-11-19 18:49:57 -08:00
linux/timex.h: cleanup for userspace
2008-12-12 17:01:38 +01:00
sched: let arch_update_cpu_topology indicate if topology changed
2008-12-12 13:47:21 +01:00
TPM: integrity interface
2009-02-03 11:23:12 +11:00
tracepoints: add DECLARE_TRACE() and DEFINE_TRACE()
2008-11-16 09:01:36 +01:00
Merge branch 'tracing-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
2008-12-28 12:21:10 -08:00
Get rid of CONFIG_LSF
2008-12-29 08:29:51 +01:00
User namespaces: set of cleanups (v2)
2008-11-24 18:57:41 -05:00
V4L/DVB (10078): video: add NV16 and NV61 pixel formats
2008-12-30 09:40:20 -02:00
virtio: avoid implicit use of Linux page size in balloon interface
2008-12-30 09:26:04 +10:30
virtio_console: support console resizing
2008-12-30 09:26:10 +10:30
virtio_net: VIRTIO_NET_F_MSG_RXBUF (imprive rcv buffer allocation)
2008-11-16 22:41:34 -08:00
virtio: Don't use PAGE_SIZE for vring alignment in virtio_pci.
2008-12-30 09:25:58 +10:30
virtio: hand virtio ring alignment as argument to vring_new_virtqueue
2008-12-30 09:26:03 +10:30
