Show patches with: Archived = No       |   750 patches
« 1 2 3 4 … 7 8 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v18,20/21] Documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,19/21] ipe: kunit test for parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,18/21] scripts: add boot policy generation program Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,17/21] ipe: enable support for fs-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,16/21] fsverity: expose verified fsverity built-in signatures to LSMs Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,15/21] security: add security_inode_setintegrity() hook Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,14/21] ipe: add support for dm-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,13/21] dm verity: expose root hash digest and signature data to LSMs Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,12/21] dm: add finalize hook to target_type Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,11/21] block,lsm: add LSM blob and new LSM hooks for block device Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,10/21] ipe: add permissive toggle Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,09/21] uapi|audit|ipe: add ipe auditing support Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,08/21] ipe: add userspace interface Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,07/21] security: add new securityfs delete function Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,06/21] ipe: introduce 'boot_verified' as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,05/21] initramfs|security: Add a security hook to do_populate_rootfs() Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,04/21] ipe: add LSM hooks on execution and kernel read Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,03/21] ipe: add evaluation loop Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,02/21] ipe: add policy parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
[v18,01/21] security: add ipe lsm Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu Superseded
fsverity: use register_sysctl_init() to avoid kmemleak warning fsverity: use register_sysctl_init() to avoid kmemleak warning - 1 - --- 2024-05-01 Eric Biggers Accepted
[6/6] common/populate: add verity files to populate xfs images [1/6] common/verity: enable fsverity for XFS - - - --- 2024-04-30 Darrick J. Wong New
[5/6] xfs: test disabling fsverity [1/6] common/verity: enable fsverity for XFS - 1 - --- 2024-04-30 Darrick J. Wong New
[4/6] xfs: test xfs_scrub detection and correction of corrupt fsverity metadata [1/6] common/verity: enable fsverity for XFS - 1 - --- 2024-04-30 Darrick J. Wong New
[3/6] xfs/122: adapt to fsverity [1/6] common/verity: enable fsverity for XFS - - - --- 2024-04-30 Darrick J. Wong New
[2/6] xfs/{021,122}: adapt to fsverity xattrs [1/6] common/verity: enable fsverity for XFS - 1 - --- 2024-04-30 Darrick J. Wong New
[1/6] common/verity: enable fsverity for XFS [1/6] common/verity: enable fsverity for XFS - 2 - --- 2024-04-30 Darrick J. Wong New
[38/38] mkfs.xfs: add verity parameter [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[37/38] xfs_io: create magic command to disable verity [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[36/38] xfs_io: report fsverity status via statx [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[35/38] xfs_spaceman: report data corruption [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[34/38] xfs_scrub: use MADV_POPULATE_READ to check verity files [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[33/38] xfs_scrub: validate verity file contents when doing a media scan [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[32/38] xfs_scrub: check verity file metadata [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[31/38] xfs_repair: allow upgrading filesystems with verity [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[30/38] xfs_repair: handle verity remote attrs [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[29/38] xfs_repair: clear verity iflag when verity isn't supported [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[28/38] xfs_repair: junk fsverity xattrs when unnecessary [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[27/38] xfs_db: compute hashes of merkle tree blocks [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[26/38] xfs_db: dump the inode verity flag [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[25/38] xfs_db: don't obfuscate verity xattrs [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[24/38] xfs_db: dump the verity descriptor [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[23/38] xfs_db: dump merkle tree data [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[22/38] xfs_db: dump verity features and metadata [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[21/38] xfs_db: create hex string as a field type [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[20/38] man: document attr_modify command [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[19/38] xfs_db: make attr_set/remove/modify be able to handle fs-verity attrs [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[18/38] xfs_db: add ATTR_PARENT support to attr_modify command [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[17/38] xfs_db: introduce attr_modify command [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[16/38] libfrog: add fsverity to xfs_report_geom output [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[15/38] xfs: enable ro-compat fs-verity flag [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[14/38] xfs: report verity failures through the health system [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[13/38] xfs: advertise fs-verity being available on filesystem [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[12/38] xfs: use merkle tree offset as attr hash [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[11/38] xfs: add fs-verity support [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[10/38] xfs: add inode on-disk VERITY flag [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[09/38] xfs: add fs-verity ro-compat flag [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[08/38] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[07/38] xfs: add attribute type for fs-verity [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[06/38] xfs: use an empty transaction to protect xfs_attr_get from deadlocks [01/38] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[05/38] xfs: minor cleanups of xfs_attr3_rmt_blocks [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[04/38] xfs: create a helper to compute the blockcount of a max sized remote value [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[03/38] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[02/38] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[01/38] fs: add FS_XFLAG_VERITY for verity files [01/38] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[26/26] xfs: enable ro-compat fs-verity flag [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[25/26] xfs: make it possible to disable fsverity [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[24/26] xfs: report verity failures through the health system [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[23/26] xfs: teach online repair to evaluate fsverity xattrs [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[22/26] xfs: check and repair the verity inode flag state [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong New
[21/26] xfs: advertise fs-verity being available on filesystem [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[20/26] xfs: add fs-verity ioctls [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[19/26] xfs: don't bother storing merkle tree blocks for zeroed data blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[18/26] xfs: use merkle tree offset as attr hash [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[17/26] xfs: don't store trailing zeroes of merkle tree blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[16/26] xfs: shrink verity blob cache [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong New
[15/26] xfs: create a per-mount shrinker for verity inodes merkle tree blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong New
[14/26] xfs: add fs-verity support [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[13/26] xfs: widen flags argument to the xfs_iflags_* helpers [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[12/26] xfs: disable direct read path for fs-verity files [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[11/26] xfs: don't allow to enable DAX on fs-verity sealed inode [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[10/26] xfs: initialize fs-verity on file open and cleanup on inode destruction [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[09/26] xfs: add inode on-disk VERITY flag [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[08/26] xfs: add fs-verity ro-compat flag [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[07/26] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong New
[06/26] xfs: add attribute type for fs-verity [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 1 - --- 2024-04-30 Darrick J. Wong New
[05/26] xfs: use an empty transaction to protect xfs_attr_get from deadlocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - - - --- 2024-04-30 Darrick J. Wong New
[04/26] xfs: minor cleanups of xfs_attr3_rmt_blocks [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 2 - --- 2024-04-30 Darrick J. Wong New
[03/26] xfs: create a helper to compute the blockcount of a max sized remote value [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 2 - --- 2024-04-30 Darrick J. Wong New
[02/26] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 2 - --- 2024-04-30 Darrick J. Wong New
[01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c [01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c - 2 - --- 2024-04-30 Darrick J. Wong New
[18/18] iomap: integrate fs-verity verification into iomap's read path [01/18] fs: add FS_XFLAG_VERITY for verity files - 1 - --- 2024-04-30 Darrick J. Wong New
[17/18] fsverity: remove system-wide workqueue [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[16/18] btrfs: use a per-superblock fsverity workqueue [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[15/18] f2fs: use a per-superblock fsverity workqueue [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[14/18] ext4: use a per-superblock fsverity workqueue [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[13/18] fsverity: pass super_block to fsverity_enqueue_verify_work [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[12/18] fsverity: report validation errors back to the filesystem [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[11/18] fsverity: pass the zero-hash value to the implementation [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
[10/18] fsverity: box up the write_merkle_tree_block parameters too [01/18] fs: add FS_XFLAG_VERITY for verity files - - - --- 2024-04-30 Darrick J. Wong New
« 1 2 3 4 … 7 8 »