Linus Torvalds f218a29c25 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security ... Pull integrity updates from James Morris: "In Linux 4.19, a new LSM hook named security_kernel_load_data was upstreamed, allowing LSMs and IMA to prevent the kexec_load syscall. Different signature verification methods exist for verifying the kexec'ed kernel image. This adds additional support in IMA to prevent loading unsigned kernel images via the kexec_load syscall, independently of the IMA policy rules, based on the runtime "secure boot" flag. An initial IMA kselftest is included. In addition, this pull request defines a new, separate keyring named ".platform" for storing the preboot/firmware keys needed for verifying the kexec'ed kernel image's signature and includes the associated IMA kexec usage of the ".platform" keyring. (David Howell's and Josh Boyer's patches for reading the preboot/firmware keys, which were previously posted for a different use case scenario, are included here)" * 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: integrity: Remove references to module keyring ima: Use inode_is_open_for_write ima: Support platform keyring for kernel appraisal efi: Allow the "db" UEFI variable to be suppressed efi: Import certificates from UEFI Secure Boot efi: Add an EFI signature blob parser efi: Add EFI signature data types integrity: Load certs to the platform keyring integrity: Define a trusted platform keyring selftests/ima: kexec_load syscall test ima: don't measure/appraise files on efivarfs x86/ima: retry detecting secure boot mode docs: Extend trusted keys documentation for TPM 2.0 x86/ima: define arch_get_ima_policy() for x86 ima: add support for arch specific policies ima: refactor ima_init_policy() ima: prevent kexec_load syscall based on runtime secureboot flag x86/ima: define arch_ima_get_secureboot integrity: support new struct public_key_signature encoding field		2019-01-02 09:43:14 -08:00
..
ABI	f2fs-for-4.21-rc1	2018-12-31 09:41:37 -08:00
accelerators
accounting	psi: cgroup support	2018-10-26 16:26:32 -07:00
acpi	ACPI: property: graph: Update graph documentation to use generic references	2018-07-23 12:44:52 +02:00
admin-guide	IOMMU Updates for Linux v4.21	2019-01-01 15:55:29 -08:00
aoe
arm	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
arm64	arm64 festive updates for 4.21	2018-12-25 17:41:56 -08:00
auxdisplay
backlight
block	block: update sysfs documentation	2018-12-16 19:53:06 -07:00
blockdev	zram: writeback throttle	2018-12-28 12:11:49 -08:00
bpf	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2018-08-07 11:02:05 -07:00
bus-devices
cdrom	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
cgroup-v1	Merge branch 'for-4.20' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2018-10-25 17:15:46 -07:00
cma
connector
console	Documentation: corrections to console/console.txt	2018-08-10 16:09:40 -06:00
core-api	RTC for 4.21	2019-01-01 13:24:31 -08:00
cpu-freq	Documentation: cpu-freq: Frequencies aren't always sorted	2018-11-07 13:29:04 +01:00
cpuidle	Documentation: admin-guide: PM: Add cpuidle document	2018-12-03 10:03:36 +01:00
crypto	crypto: skcipher - remove remnants of internal IV generators	2018-12-23 11:52:45 +08:00
dev-tools	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
device-mapper	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
devicetree	IOMMU Updates for Linux v4.21	2019-01-01 15:55:29 -08:00
doc-guide	doc:process: add links where missing	2018-12-06 10:21:19 -07:00
driver-api	dmaengine-4.21-rc1	2019-01-01 15:45:48 -08:00
driver-model	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
early-userspace	Correct gen_init_cpio tool's documentation	2018-11-25 12:25:53 -07:00
EDID	Docs/EDID: Calculate CRC while building the code	2018-11-06 07:36:22 -07:00
extcon
fault-injection
fb	This is a fairly typical cycle for documentation. There's some welcome	2018-10-24 18:01:11 +01:00
features	Xtensa updates for v4.21:	2018-12-29 09:40:40 -08:00
filesystems	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
firmware_class
fmc	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
fpga
gpio	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
gpu	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
hid
hwmon	hwmon: Introduce SENSOR_DEVICE_ATTR_{RO, RW, WO} and variants	2018-12-16 15:13:22 -08:00
i2c	i2c: add i2c bus driver for NVIDIA GPU	2018-11-09 17:46:43 +01:00
ia64
ide	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
iio
infiniband
input	Revert "Input: Add the REL_WHEEL_HI_RES event code"	2018-11-22 08:57:44 +01:00
ioctl	drm pull for 4.20-rc1	2018-10-28 17:49:53 -07:00
isdn	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
kbuild	kbuild: announce removal of SUBDIRS if used	2018-12-01 22:21:56 +09:00
kdump
kernel-hacking	doc:it_IT: translation for kernel-hacking	2018-07-26 16:21:09 -06:00
laptops	platform-drivers-x86 for v4.20-1	2018-11-01 08:42:21 -07:00
leds	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
lightnvm
livepatch
locking	This is a fairly typical cycle for documentation. There's some welcome	2018-10-24 18:01:11 +01:00
m68k	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
maintainer
md
media	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
memory-devices
mic
mips	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
misc-devices	pci_endpoint_test: Add 2 ioctl commands	2018-07-19 11:46:57 +01:00
mmc	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
mtd	Documentation: mtd: remove stale pxa3xx NAND controller documentation	2018-09-04 23:37:38 +02:00
namespaces
netlabel	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
networking	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
nfc
nios2
nvdimm	libnvdimm/security: Add documentation for nvdimm security support	2018-12-21 12:44:41 -08:00
nvmem	Documentation: nvmem: document cell tables and lookup entries	2018-09-28 15:14:54 +02:00
openrisc
parisc	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
PCI	pci-v4.20-changes	2018-10-25 06:50:48 -07:00
pcmcia	pcmcia: remove long deprecated pcmcia_request_exclusive_irq() function	2018-08-18 12:30:42 -07:00
perf	Documentation: perf: Add documentation for ThunderX2 PMU uncore driver	2018-12-06 12:29:47 +00:00
phy
platform
power	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
powerpc	powerpc/fadump: Reservationless firmware assisted dump	2018-12-21 11:32:49 +11:00
pps
process	doc:process: add links where missing	2018-12-06 10:21:19 -07:00
pti
ptp
rapidio
RCU	doc: Fix "struction" typo in RCU memory-ordering documentation	2018-11-12 08:56:25 -08:00
riscv
s390	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
scheduler	This is a fairly typical cycle for documentation. There's some welcome	2018-10-24 18:01:11 +01:00
scsi	SCSI misc on 20181224	2018-12-28 14:48:06 -08:00
security	Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-01-02 09:43:14 -08:00
serial	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
sh	sh: remove board_time_init() callback	2018-12-18 16:13:04 +01:00
sound	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
sparc
sphinx
sphinx-static	docs: improve readability for people with poorer eyesight	2018-10-07 09:16:50 -06:00
spi	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
sysctl	mm: reclaim small amounts of memory when an external fragmentation event occurs	2018-12-28 12:11:48 -08:00
target
thermal	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
timers	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
trace	Tracing changes for v4.21:	2018-12-31 11:46:59 -08:00
translations	doc🇮🇹 add some process/* translations	2018-12-06 10:11:40 -07:00
usb	Documentation/usb: Fix typo	2018-11-26 16:56:34 +01:00
userspace-api	x86/speculation: Add prctl() control for indirect branch speculation	2018-11-28 11:57:13 +01:00
virtual	x86/kvm/hyper-v: Introduce KVM_GET_SUPPORTED_HV_CPUID	2018-12-14 17:59:54 +01:00
vm	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
w1	Drop all 00-INDEX files from Documentation/	2018-09-09 15:08:58 -06:00
watchdog	watchdog: docs: kernel-api: don't reference removed functions	2018-12-24 13:15:06 +01:00
wimax
x86	A fairly normal cycle for documentation stuff. We have a new	2018-12-29 11:21:49 -08:00
xilinx	Documentation: xilinx: Add documentation for eemi APIs	2018-10-09 13:26:05 +02:00
xtensa
.gitignore
atomic_bitops.txt
atomic_t.txt
bt8xxgpio.txt
btmrvl.txt
bus-virt-phys-mapping.txt
Changes
clearing-warn-once.txt
CodingStyle
conf.py	This is a fairly typical cycle for documentation. There's some welcome	2018-10-24 18:01:11 +01:00
cpu-load.txt
cputopology.txt
crc32.txt
dcdbas.txt
debugging-modules.txt
debugging-via-ohci1394.txt
dell_rbu.txt
digsig.txt
DMA-API-HOWTO.txt
DMA-API.txt	dma-mapping: deprecate dma_zalloc_coherent	2018-12-20 08:14:09 +01:00
DMA-attributes.txt
DMA-ISA-LPC.txt
docutils.conf
dontdiff
efi-stub.txt	efi_stub: update documentation on dtb= parameter	2018-09-09 14:46:44 -06:00
eisa.txt
flexible-arrays.txt
futex-requeue-pi.txt
gcc-plugins.txt
highuid.txt
hw_random.txt
hwspinlock.txt
index.rst	docs: tidy up TOCs and refs to license-rules.rst	2018-08-31 16:50:50 -06:00
intel_txt.txt
Intel-IOMMU.txt
io_ordering.txt
io-mapping.txt
iostats.txt	block: Track DISCARD statistics and output them in stat and diskstat	2018-07-18 08:44:22 -06:00
IPMI.txt
IRQ-affinity.txt
IRQ-domain.txt
IRQ.txt
irqflags-tracing.txt
isa.txt
isapnp.txt
kernel-per-CPU-kthreads.txt	doc: Update removal of RCU-bh/sched update machinery	2018-08-30 10:59:48 -07:00
kobject.txt	kref/kobject: Improve documentation	2018-12-06 13:57:03 +01:00
kprobes.txt
kref.txt
ldm.txt
lockup-watchdogs.txt
logo.gif
logo.txt
lsm.txt
lzo.txt
mailbox.txt
Makefile	kbuild: Add support for DT binding schema checks	2018-12-13 09:41:32 -06:00
memory-barriers.txt	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
men-chameleon-bus.txt
nommu-mmap.txt
ntb.txt
numastat.txt
padata.txt
parport-lowlevel.txt
percpu-rw-semaphore.txt
phy.txt
pi-futex.txt
pnp.txt
preempt-locking.txt	Documentation: preempt-locking: Use better example	2018-10-12 11:35:47 -06:00
pwm.txt
rbtree.txt
remoteproc.txt
rfkill.txt
robust-futex-ABI.txt
robust-futexes.txt
rpmsg.txt
rtc.txt
SAK.txt
sgi-ioc4.txt
siphash.txt
SM501.txt
smsc_ece1099.txt
speculation.txt
static-keys.txt	Documentation: Use "while" instead of "whilst"	2018-11-20 09:30:43 -07:00
SubmittingPatches
svga.txt
switchtec.txt	NTB: switchtec_ntb: Update switchtec documentation with prerequisites for NTB	2018-10-11 11:28:53 -05:00
sync_file.txt
tee.txt
this_cpu_ops.txt
unaligned-memory-access.txt
vfio-mediated-device.txt
vfio.txt
video-output.txt
xillybus.txt
xz.txt
zorro.txt