linux

mirror of https://github.com/hardkernel/linux.git synced 2026-06-06 19:08:57 +09:00

Go to file

Mimi Zohar 10918ebecd ima: fix blocking of security.ima xattrs of unsupported algorithms

[ Upstream commit 5926586f29 ]

Limit validating the hash algorithm to just security.ima xattr, not
the security.evm xattr or any of the protected EVM security xattrs,
nor posix acls.

Fixes: 50f742dd91 ("IMA: block writes of the security.ima xattr with unsupported algorithms")
Reported-by: Christian Brauner <brauner@kernel.org>
Acked-by: Christian Brauner (Microsoft) <brauner@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-10-26 12:34:35 +02:00

arch

KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS

2022-10-26 12:34:33 +02:00

block

blk-wbt: call rq_qos_add() after wb_normal is initialized

2022-10-26 12:34:33 +02:00

certs

certs/blacklist_hashes.c: fix const confusion in certs blacklist

2022-06-22 14:22:01 +02:00

crypto

KEYS: asymmetric: enforce SM2 signature use pkey algo

2022-08-17 14:24:28 +02:00

Documentation

fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE

2022-10-26 12:34:27 +02:00

drivers

drm/amd/display: Fix vblank refcount in vrr transition

2022-10-26 12:34:35 +02:00

smb3: must initialize two ACL struct fields to zero

2022-10-26 12:34:35 +02:00

include

tracing: Wake up ring buffer waiters on closing of the file

2022-10-26 12:34:31 +02:00

init

stack: Declare {randomize_,}kstack_offset to fix Sparse warnings

2022-08-17 14:23:10 +02:00

ipc

ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()

2022-06-09 10:23:10 +02:00

kernel

tracing: Fix reading strings from synthetic events

2022-10-26 12:34:32 +02:00

lib

crypto: lib - remove unneeded selection of XOR_BLOCKS

2022-09-05 10:30:03 +02:00

LICENSES

LICENSES/dual/CC-BY-4.0: Git rid of "smart quotes"

2021-07-15 06:31:24 -06:00

mm/mmap: undo ->mmap() when arch_validate_flags() fails

2022-10-26 12:34:24 +02:00

net

wifi: mac80211: fix MBSSID parsing use-after-free

2022-10-15 07:59:05 +02:00

samples

samples/landlock: Format with clang-format

2022-06-09 10:23:23 +02:00

scripts

selinux: use "grep -E" instead of "egrep"

2022-10-26 12:34:35 +02:00

security

ima: fix blocking of security.ima xattrs of unsupported algorithms

2022-10-26 12:34:35 +02:00

sound

ASoC: wcd934x: fix order of Slimbus unprepare/disable

2022-10-26 12:34:21 +02:00

tools

perf parse-events: Identify broken modifiers

2022-10-12 09:53:28 +02:00

usr

usr/include/Makefile: add linux/nfc.h to the compile-test coverage

2022-02-01 17:27:15 +01:00

virt

KVM: SEV: add cache flush to solve SEV cache incoherency issues

2022-09-23 14:15:52 +02:00

.clang-format

clang-format: Update with the latest for_each macro list

2021-05-12 23:32:39 +02:00

.cocciconfig

…

.get_maintainer.ignore

Opt out of scripts/get_maintainer.pl

2019-05-16 10:53:40 -07:00

.gitattributes

.gitattributes: use 'dts' diff driver for dts files

2019-12-04 19:44:11 -08:00

.gitignore

.gitignore: ignore only top-level modules.builtin

2021-05-02 00:43:35 +09:00

.mailmap

mailmap: add Andrej Shadura

2021-10-18 20:22:03 -10:00

COPYING

COPYING: state that all contributions really are covered by this file

2020-02-10 13:32:20 -08:00

CREDITS

MAINTAINERS: Move Daniel Drake to credits

2021-09-21 08:34:58 +03:00

Kbuild

kbuild: rename hostprogs-y/always to hostprogs/always-y

2020-02-04 01:53:07 +09:00

Kconfig

kbuild: ensure full rebuild when the compiler is updated

2020-05-12 13:28:33 +09:00

MAINTAINERS

Input: goodix - add a goodix.h header file

2022-07-12 16:34:51 +02:00

Makefile

hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero

2022-10-26 12:34:28 +02:00

README

Drop all 00-INDEX files from Documentation/

2018-09-09 15:08:58 -06:00

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.