{"push_id":709364344,"size":48,"distinct_size":1,"ref":"refs/heads/topics/drivers/pc3x3-hw_random-drivers","head":"5a6c1d46d53884b482f47dec095371c27d288094","before":"b44337a611615df95f2c3f1e3b1923797fb40ed5","commits":[{"sha":"3c4ed7bdf5997d8020cbb8d4abbef2fcfb9f1284","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Split security.h\n\nThe security.h header file serves two purposes,\ninterfaces for users of the security modules and\ninterfaces for security modules. Users of the\nsecurity modules don't need to know about what's\nin the security_operations structure, so pull it\nout into it's own header, lsm_hooks.h\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/3c4ed7bdf5997d8020cbb8d4abbef2fcfb9f1284"},{"sha":"fe7bb272ee72b5cc377e02b556d0d718d12bbede","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Add the comment to lsm_hooks.h\n\nAdd the large comment describing the content of the\nsecurity_operations structure to lsm_hooks.h. This\nwasn't done in the previous (1/7) patch because it\nwould have exceeded the mail list size limits.\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/fe7bb272ee72b5cc377e02b556d0d718d12bbede"},{"sha":"346033a28fb16b83dac2a74d8025ff8ee64a2c9b","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Remove a comment from security.h\n\nRemove the large comment describing the content of the\nsecurity_operations structure from security.h. This\nwasn't done in the previous (2/7) patch because it\nwould have exceeded the mail list size limits.\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/346033a28fb16b83dac2a74d8025ff8ee64a2c9b"},{"sha":"f25fce3e8f1f15d6d2a22620ebf98a68a4641f06","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Introduce security hook calling Macros\n\nIntroduce two macros around calling the functions in the\nsecurity operations vector. The marco versions here do not\nchange any behavior.\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/f25fce3e8f1f15d6d2a22620ebf98a68a4641f06"},{"sha":"e20b043a6902ecb61c2c84355c3bae5149f391db","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Add security module hook list heads\n\nAdd a list header for each security hook. They aren't used until\nlater in the patch series. They are grouped together in a structure\nso that there doesn't need to be an external address for each.\n\nMacro-ize the initialization of the security_operations\nfor each security module in anticipation of changing out\nthe security_operations structure.\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/e20b043a6902ecb61c2c84355c3bae5149f391db"},{"sha":"b1d9e6b0646d0e5ee5d9050bd236b6c65d66faef","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Switch to lists of hooks\n\nInstead of using a vector of security operations\nwith explicit, special case stacking of the capability\nand yama hooks use lists of hooks with capability and\nyama hooks included as appropriate.\n\nThe security_operations structure is no longer required.\nInstead, there is a union of the function pointers that\nallows all the hooks lists to use a common mechanism for\nlist management while retaining typing. Each module\nsupplies an array describing the hooks it provides instead\nof a sparsely populated security_operations structure.\nThe description includes the element that gets put on\nthe hook list, avoiding the issues surrounding individual\nelement allocation.\n\nThe method for registering security modules is changed to\nreflect the information available. The method for removing\na module, currently only used by SELinux, has also changed.\nIt should be generic now, however if there are potential\nrace conditions based on ordering of hook removal that needs\nto be addressed by the calling module.\n\nThe security hooks are called from the lists and the first\nfailure is returned.\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/b1d9e6b0646d0e5ee5d9050bd236b6c65d66faef"},{"sha":"1ddd3b4e07a4be9fe3f1ce2441b01859154f4358","author":{"email":"77bc9a9984e6786c5799d7a71768cf023120ef76@schaufler-ca.com","name":"Casey Schaufler"},"message":"LSM: Remove unused capability.c\n\nThe stub functions in capability.c are no longer required\nwith the list based stacking mechanism. Remove the file.\n\nSigned-off-by: Casey Schaufler <casey@schaufler-ca.com>\nAcked-by: John Johansen <john.johansen@canonical.com>\nAcked-by: Kees Cook <keescook@chromium.org>\nAcked-by: Paul Moore <paul@paul-moore.com>\nAcked-by:  Stephen Smalley <sds@tycho.nsa.gov>\nAcked-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nSigned-off-by: James Morris <james.l.morris@oracle.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/1ddd3b4e07a4be9fe3f1ce2441b01859154f4358"},{"sha":"5577857f8e26e9027271f10daf96361640907300","author":{"email":"ff341aa343d564f9e53e9dcb6996be8c04859a66@oracle.com","name":"Dan Carpenter"},"message":"ima: cleanup ima_init_policy() a little\n\nIt's a bit easier to read this if we split it up into two for loops.\n\nSigned-off-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/5577857f8e26e9027271f10daf96361640907300"},{"sha":"8265a2f89c8ecf526931951fa240982d1f438736","author":{"email":"94ea525fd7aced47fdbba5af2d99c9fb092c12fd@suse.de","name":"Roberto Sassu"},"message":"ima: added ima-sig template among choices in kernel-parameters.txt\n\nThis patch adds the template 'ima-sig' among choices for the kernel\nparameter 'ima_template'.\n\nSigned-off-by: Roberto Sassu <rsassu@suse.de>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/8265a2f89c8ecf526931951fa240982d1f438736"},{"sha":"9777582e8d604f69ce3a93805065e451487e26b4","author":{"email":"f0452ad01023e1e19deb03356bab8e3b5dbc61a6@samsung.com","name":"Seung-Woo Kim"},"message":"Smack: ignore private inode for smack_file_receive\n\nThe dmabuf fd can be shared between processes via unix domain\nsocket. The file of dmabuf fd is came from anon_inode. The inode\nhas no set and get xattr operations, so it can not be shared\nbetween processes with smack. This patch fixes just to ignore\nprivate inode including anon_inode for smack_file_receive.\n\nSigned-off-by: Seung-Woo Kim <sw0312.kim@samsung.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/9777582e8d604f69ce3a93805065e451487e26b4"},{"sha":"e774ad683f425a51f87711164ea166d9dcc41477","author":{"email":"36afe7ea209fd8876bcef37fa1ca01a46d94b372@samsung.com","name":"Lukasz Pawelczyk"},"message":"smack: pass error code through pointers\n\nThis patch makes the following functions to use ERR_PTR() and related\nmacros to pass the appropriate error code through returned pointers:\n\nsmk_parse_smack()\nsmk_import_entry()\nsmk_fetch()\n\nIt also makes all the other functions that use them to handle the\nerror cases properly. This ways correct error codes from places\nwhere they happened can be propagated to the user space if necessary.\n\nDoing this it fixes a bug in onlycap and unconfined files\nhandling. Previously their content was cleared on any error from\nsmk_import_entry/smk_parse_smack, be it EINVAL (as originally intended)\nor ENOMEM. Right now it only reacts on EINVAL passing other codes\nproperly to userspace.\n\nComments have been updated accordingly.\n\nSigned-off-by: Lukasz Pawelczyk <l.pawelczyk@samsung.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/e774ad683f425a51f87711164ea166d9dcc41477"},{"sha":"6438de9f3fb5180d78a0422695d0b88c687757d3","author":{"email":"94ea525fd7aced47fdbba5af2d99c9fb092c12fd@suse.de","name":"Roberto Sassu"},"message":"ima: skip measurement of cgroupfs files and update documentation\n\nThis patch adds a rule in the default measurement policy to skip inodes\nin the cgroupfs filesystem. Measurements for this filesystem can be\navoided, as all the digests collected have the same value of the digest of\nan empty file.\n\nFurthermore, this patch updates the documentation of IMA policies in\nDocumentation/ABI/testing/ima_policy to make it consistent with\nthe policies set in security/integrity/ima/ima_policy.c.\n\nSigned-off-by: Roberto Sassu <rsassu@suse.de>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/6438de9f3fb5180d78a0422695d0b88c687757d3"},{"sha":"cd025f7f94108995383edddfb61fc8afea6c66a9","author":{"email":"f02992f7c171053741caa6b515d9896745b37477@linux.vnet.ibm.com","name":"Mimi Zohar"},"message":"ima: do not measure or appraise the NSFS filesystem\n\nInclude don't appraise or measure rules for the NSFS filesystem\nin the builtin ima_tcb and ima_appraise_tcb policies.\n\nChangelog:\n- Update documentation\n\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>\nCc: stable@vger.kernel.org # 3.19","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/cd025f7f94108995383edddfb61fc8afea6c66a9"},{"sha":"c68ed80c97d9720f51ef31fe91560fdd1e121533","author":{"email":"c116bc32ce0fd3cd5ab78828b5c5c631dc6f63d8@samsung.com","name":"Dmitry Kasatkin"},"message":"ima: limit file hash setting by user to fix and log modes\n\nFile hashes are automatically set and updated and should not be\nmanually set. This patch limits file hash setting to fix and log\nmodes.\n\nSigned-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/c68ed80c97d9720f51ef31fe91560fdd1e121533"},{"sha":"a18d0cbfabd1d17e11ec2ae54804284298462125","author":{"email":"c116bc32ce0fd3cd5ab78828b5c5c631dc6f63d8@samsung.com","name":"Dmitry Kasatkin"},"message":"ima: remove definition of IMA_X509_PATH\n\nCONFIG_IMA_X509_PATH is always defined.  This patch removes the\nIMA_X509_PATH definition and uses CONFIG_IMA_X509_PATH.\n\nSigned-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/a18d0cbfabd1d17e11ec2ae54804284298462125"},{"sha":"5101a1850bb7ccbf107929dee9af0cd2f400940f","author":{"email":"f02992f7c171053741caa6b515d9896745b37477@linux.vnet.ibm.com","name":"Mimi Zohar"},"message":"evm: labeling pseudo filesystems exception\n\nTo prevent offline stripping of existing file xattrs and relabeling of\nthem at runtime, EVM allows only newly created files to be labeled.  As\npseudo filesystems are not persistent, stripping of xattrs is not a\nconcern.\n\nSome LSMs defer file labeling on pseudo filesystems.  This patch\npermits the labeling of existing files on pseudo files systems.\n\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/5101a1850bb7ccbf107929dee9af0cd2f400940f"},{"sha":"7c51bb00c40e5608fb2cdac5230f51aeb56a28df","author":{"email":"c116bc32ce0fd3cd5ab78828b5c5c631dc6f63d8@samsung.com","name":"Dmitry Kasatkin"},"message":"evm: fix potential race when removing xattrs\n\nEVM needs to be atomically updated when removing xattrs.\nOtherwise concurrent EVM verification may fail in between.\nThis patch fixes by moving i_mutex unlocking after calling\nEVM hook. fsnotify_xattr() is also now called while locked\nthe same way as it is done in __vfs_setxattr_noperm.\n\nChangelog:\n- remove unused 'inode' variable.\n\nSigned-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/7c51bb00c40e5608fb2cdac5230f51aeb56a28df"},{"sha":"f2b3dee484f9cee967a54ef05a66866282337519","author":{"email":"f02992f7c171053741caa6b515d9896745b37477@linux.vnet.ibm.com","name":"Mimi Zohar"},"message":"KEYS: fix \"ca_keys=\" partial key matching\n\nThe call to asymmetric_key_hex_to_key_id() from ca_keys_setup()\nsilently fails with -ENOMEM.  Instead of dynamically allocating\nmemory from a __setup function, this patch defines a variable\nand calls __asymmetric_key_hex_to_key_id(), a new helper function,\ndirectly.\n\nThis bug was introduced by 'commit 46963b774d44 (\"KEYS: Overhaul\nkey identification when searching for asymmetric keys\")'.\n\nChangelog:\n- for clarification, rename hexlen to asciihexlen in\n  asymmetric_key_hex_to_key_id()\n- add size argument to __asymmetric_key_hex_to_key_id() - David Howells\n- inline __asymmetric_key_hex_to_key_id() - David Howells\n- remove duplicate strlen() calls\n\nAcked-by: David Howells <dhowells@redhat.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>\nCc: stable@vger.kernel.org # 3.18","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/f2b3dee484f9cee967a54ef05a66866282337519"},{"sha":"9d03a721a3a4a5120de790a0e67dc324c2ed9184","author":{"email":"c116bc32ce0fd3cd5ab78828b5c5c631dc6f63d8@samsung.com","name":"Dmitry Kasatkin"},"message":"integrity: add validity checks for 'path' parameter\n\nThis patch adds validity checks for 'path' parameter and\nmakes it const.\n\nSigned-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/9d03a721a3a4a5120de790a0e67dc324c2ed9184"},{"sha":"23b5741932ca44856762fa24cc7e01307ab8af1f","author":{"email":"94ea525fd7aced47fdbba5af2d99c9fb092c12fd@suse.de","name":"Roberto Sassu"},"message":"ima: wrap event related data to the new ima_event_data structure\n\nAll event related data has been wrapped into the new 'ima_event_data'\nstructure. The main benefit of this patch is that a new information\ncan be made available to template fields initialization functions\nby simply adding a new field to the new structure instead of modifying\nthe definition of those functions.\n\nChangelog:\n - v2:\n   - f_dentry replaced with f_path.dentry (Roberto Sassu)\n   - removed declaration of temporary variables in template field functions\n     when possible (suggested by Dmitry Kasatkin)\n\nSigned-off-by: Roberto Sassu <rsassu@suse.de>\nSigned-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>","distinct":false,"url":"https://api.github.com/repos/r1mikey/linux-picoxcell/commits/23b5741932ca44856762fa24cc7e01307ab8af1f"}]}