Jaskaran Khurana
88cd3e6cfa
dm verity: add root hash pkcs#7 signature verification ...
The verification is to support cases where the root hash is not secured
by Trusted Boot, UEFI Secureboot or similar technologies.
One of the use cases for this is for dm-verity volumes mounted after
boot, the root hash provided during the creation of the dm-verity volume
has to be secure and thus in-kernel validation implemented here will be
used before we trust the root hash and allow the block device to be
created.
The signature being provided for verification must verify the root hash
and must be trusted by the builtin keyring for verification to succeed.
The hash is added as a key of type "user" and the description is passed
to the kernel so it can look it up and use it for verification.
Adds CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG which can be turned on if root
hash verification is needed.
Kernel commandline dm_verity module parameter 'require_signatures' will
indicate whether to force root hash signature verification (for all dm
verity volumes).
Signed-off-by: Jaskaran Khurana <jaskarankhurana@linux.microsoft.com>
Tested-and-Reviewed-by: Milan Broz <gmazyland@gmail.com>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
2019-08-23 10:13:14 -04:00
platform/x86: asus: Rename "fan mode" to "fan boost mode"
2019-07-17 19:07:58 +03:00
docs: add some documentation dirs to the driver-api book
2019-07-15 11:03:02 -03:00
acpi /dsd
dm verity: add root hash pkcs#7 signature verification
2019-08-23 10:13:14 -04:00
docs: arm: fix a breakage with pdf output
2019-07-15 11:03:04 -03:00
docs: add arch doc directories to the index
2019-07-15 11:03:01 -03:00
docs: admin-guide: add a series of orphaned documents
2019-07-15 11:03:02 -03:00
docs conversion for v5.3-rc1
2019-07-16 12:21:41 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2019-07-11 10:55:49 -07:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
Merge branch 'pdf_fixes_v1' of https://git.linuxtv.org/mchehab/experimental into mauro
2019-07-22 13:51:20 -06:00
RISC-V updates for v5.3-rc4
2019-08-10 16:31:47 -07:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: phy: Drop duplicate 'be made'
2019-07-26 08:15:26 -06:00
docs: driver-api: add a series of orphaned documents
2019-07-15 11:03:02 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
docs conversion for v5.3-rc1
2019-07-16 12:21:41 -07:00
smb3: update TODO list of missing features
2019-08-05 22:50:38 -05:00
docs: gpio: add sysfs interface to the admin-guide
2019-07-15 11:03:03 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: add some documentation dirs to the driver-api book
2019-07-15 11:03:02 -03:00
hwmon: (k8temp) documentation: update URL of datasheet
2019-07-21 19:18:45 -07:00
Merge branch 'i2c/for-5.3' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux
2019-07-15 21:10:39 -07:00
docs: add SPDX tags to new index files
2019-07-15 11:03:03 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
docs: add some documentation dirs to the driver-api book
2019-07-15 11:03:02 -03:00
docs: infiniband: add it to the driver-api bookset
2019-07-08 14:22:56 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: ioctl: add it to the uAPI guide
2019-07-15 09:20:28 -03:00
Kbuild updates for v5.3 (2nd)
2019-07-20 09:34:55 -07:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: leds: add it to the driver-api book
2019-07-15 09:20:28 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
docs: fix broken doc references due to renames
2019-07-17 06:57:51 -03:00
docs: add arch doc directories to the index
2019-07-15 11:03:01 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: driver-api: add remaining converted dirs to it
2019-07-15 11:03:03 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2019-08-06 17:11:59 -07:00
docs: powerpc: convert docs to ReST and rename to *.rst
2019-07-17 06:57:51 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
Merge branch 'pdf_fixes_v1' of https://git.linuxtv.org/mchehab/experimental into mauro
2019-07-22 13:51:20 -06:00
docs: powerpc: convert docs to ReST and rename to *.rst
2019-07-17 06:57:51 -03:00
Wimplicit-fallthrough patches for 5.3-rc2
2019-07-27 11:04:18 -07:00
docs: fix broken doc references due to renames
2019-07-17 06:57:51 -03:00
RISC-V updates for v5.3
2019-07-18 12:26:59 -07:00
Fixes in vfio-ccw for older and newer issues.
2019-07-23 10:44:28 +02:00
docs conversion for v5.3-rc1
2019-07-16 12:21:41 -07:00
scsi: ufs: Documentation: Announce ufs-tool v1.0
2019-06-26 22:47:51 -04:00
docs: security: move some books to it and update
2019-07-15 11:03:01 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: add arch doc directories to the index
2019-07-15 11:03:01 -03:00
docs: load_config.py: ensure subdirs end with "/"
2019-07-19 08:49:27 -03:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
docs: thermal: convert to ReST
2019-06-27 21:22:15 +08:00
docs: add some directories to the main documentation index
2019-07-15 11:03:03 -03:00
The main changes in this release include:
2019-07-18 11:51:00 -07:00
doc:it_IT: translations in process/
2019-07-22 14:47:02 -06:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
This is mostly a set of follow-on fixes from Mauro fixing various fallout
2019-07-26 11:29:24 -07:00
HMM patches for 5.3-rc
2019-07-30 12:54:44 -07:00
docs: driver-api: add a series of orphaned documents
2019-07-15 11:03:02 -03:00
Merge branch 'pdf_fixes_v1' of https://git.linuxtv.org/mchehab/experimental into mauro
2019-07-22 13:51:20 -06:00
docs: remove extra conf.py files
2019-07-17 06:57:52 -03:00
docs: add arch doc directories to the index
2019-07-15 11:03:01 -03:00
Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-07-08 16:12:03 -07:00
docs: conf.py: only use CJK if the font is available
2019-07-17 06:57:51 -03:00
docs: logo.txt: rename it to COPYING-logo
2019-07-15 09:20:27 -03:00
docs: DMA-API-HOWTO.txt: fix an unmarked code block
2019-07-15 09:20:24 -03:00
kbuild: create *.mod with full directory path and remove MODVERDIR
2019-07-18 02:19:31 +09:00
hwspinlock: add the 'in_atomic' API
2019-06-29 21:08:14 -07:00
docs: virtual: add it to the documentation body
2019-07-17 06:57:52 -03:00
docs: fix broken doc references due to renames
2019-07-17 06:57:51 -03:00
docs: locking: convert docs to ReST and rename to *.rst
2019-07-15 08:53:27 -03:00
docs: rbtree.txt: fix Sphinx build warnings
2019-07-15 09:20:24 -03:00
remoteproc: add vendor resources handling
2019-06-29 12:02:17 -07:00
88cd3e6cfa
