linux-kernel - [GIT PULL] Security subsystem: integrity updates for v5.2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LRH.2.21.1905100323410.25349@namei.org>
Date:   Fri, 10 May 2019 03:25:24 +1000 (AEST)
From:   James Morris <jmorris@...ei.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
cc:     linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org
Subject: [GIT PULL] Security subsystem: integrity updates for v5.2

>From Mimi:
    
    "This pull request contains just three patches, the remainder are
    either included in other pull requests (eg. audit, lockdown) or will
    be upstreamed via other subsystems (eg. kselftests, Power).  Included
    in this pull request is one bug fix, one documentation update, and
    extending the x86 IMA arch policy rules to coordinate the different
    kernel module signature verification methods."

The following changes since commit fe9fd2ef383c2f5883fcd3f7adce0de9ce2556ff:

  Revert "security: inode: fix a missing check for securityfs_create_file" (2019-04-10 14:59:20 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next-integrity

for you to fetch changes up to 2bfebea90dd5e8c57ae1021a5d1bb6c1057eee6d:

  Merge branch 'next-integrity-for-james' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity (2019-04-12 15:20:23 -0700)

----------------------------------------------------------------
James Morris (1):
      Merge branch 'next-integrity-for-james' of git://git.kernel.org/.../zohar/linux-integrity into next-integrity

Mimi Zohar (2):
      x86/ima: require signed kernel modules
      x86/ima: add missing include

Petr Vorel (1):
      doc/kernel-parameters.txt: Deprecate ima_appraise_tcb

 Documentation/admin-guide/kernel-parameters.txt |  5 ++---
 arch/x86/kernel/ima_arch.c                      | 10 +++++++++-
 include/linux/module.h                          |  5 +++++
 kernel/module.c                                 |  5 +++++
 4 files changed, 21 insertions(+), 4 deletions(-)