linux-kernel - [GIT PULL] integrity: susbystem updates for v6.7

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <205e07e901e695f4986bf0e4071168302fbf59bc.camel@linux.ibm.com>
Date:   Tue, 31 Oct 2023 10:38:46 -0400
From:   Mimi Zohar <zohar@...ux.ibm.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-integrity <linux-integrity@...r.kernel.org>,
        linux-kernel <linux-kernel@...r.kernel.org>
Subject: [GIT PULL] integrity: susbystem updates for v6.7

Hi Linus,

Four integrity changes: two IMA-overlay updates, an integrity Kconfig
cleanup, and a secondary keyring update.

Stephen Rothwell is carrying an overlay merge conflict resolution:
https://lore.kernel.org/linux-next/20231027131137.3051da98@canb.auug.org.au/

thanks,

Mimi

The following changes since commit 94f6f0550c625fab1f373bb86a6669b45e9748b3:

  Linux 6.6-rc5 (2023-10-08 13:49:43 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git tags/integrity-v6.7

for you to fetch changes up to b836c4d29f2744200b2af41e14bf50758dddc818:

  ima: detect changes to the backing overlay file (2023-10-31 08:22:36 -0400)

----------------------------------------------------------------
integrity-v6.7

----------------------------------------------------------------
Amir Goldstein (1):
      ima: annotate iint mutex to avoid lockdep false positive warnings

Mimi Zohar (2):
      certs: Only allow certs signed by keys on the builtin keyring
      ima: detect changes to the backing overlay file

Prasad Pandit (1):
      integrity: fix indentation of config attributes

 certs/Kconfig                     | 16 ++++++++++++-
 crypto/asymmetric_keys/restrict.c |  4 ++++
 fs/overlayfs/super.c              |  2 +-
 security/integrity/Kconfig        | 44 +++++++++++++++++------------------
 security/integrity/iint.c         | 48 ++++++++++++++++++++++++++++++---------
 security/integrity/ima/ima_api.c  |  5 ++++
 security/integrity/ima/ima_main.c | 16 ++++++++++++-
 security/integrity/integrity.h    |  2 ++
 8 files changed, 101 insertions(+), 36 deletions(-)