linux-kernel - [PULL] fw-restrict update (3.17)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20140725185048.GA27939@www.outflux.net>
Date:	Fri, 25 Jul 2014 11:50:48 -0700
From:	Kees Cook <keescook@...omium.org>
To:	James Morris <jmorris@...ei.org>
Cc:	linux-security-module@...r.kernel.org,
	linux-kernel@...r.kernel.org,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Kees Cook <keescook@...omium.org>,
	Mimi Zohar <zohar@...ux.vnet.ibm.com>,
	Takashi Iwai <tiwai@...e.de>
Subject: [PULL] fw-restrict update (3.17)

Hi James,

Please pull these fw-restrict changes for 3.17. Thanks!

-Kees

The following changes since commit 7d8b6c63751cfbbe5eef81a48c22978b3407a3ad:

  CAPABILITIES: remove undefined caps from all processes (2014-07-24 21:53:47 +1000)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/fw-restrict-3.17

for you to fetch changes up to 5a9196d715607f76d6b7d96a0970d6065335e62b:

  ima: add support for measuring and appraising firmware (2014-07-25 11:47:46 -0700)

----------------------------------------------------------------
Firmware validation hooks

----------------------------------------------------------------
Kees Cook (2):
      security: introduce kernel_fw_from_file hook
      firmware_class: perform new LSM checks

Mimi Zohar (1):
      ima: add support for measuring and appraising firmware

 Documentation/ABI/testing/ima_policy  |  4 +++-
 drivers/base/firmware_class.c         | 30 ++++++++++++++++++++++++++----
 include/linux/ima.h                   |  6 ++++++
 include/linux/security.h              | 17 +++++++++++++++++
 security/capability.c                 |  6 ++++++
 security/integrity/ima/ima.h          |  3 ++-
 security/integrity/ima/ima_appraise.c |  8 ++++++++
 security/integrity/ima/ima_main.c     | 11 +++++++++++
 security/integrity/ima/ima_policy.c   |  7 +++++++
 security/integrity/integrity.h        |  9 +++++++--
 security/security.c                   | 11 +++++++++++
 11 files changed, 104 insertions(+), 8 deletions(-)

-- 
Kees Cook
Chrome OS Security
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/