[GIT] Security subsystem updates for 3.3

From: James Morris
Date: Sun Jan 08 2012 - 21:23:07 EST

Next message: Namhyung Kim: "Re: [PATCH 03/11] block: block_bio_complete tracepoint was missing"
Previous message: Stephen Rothwell: "Re: linux-next: manual merge of the vfs tree with Linus' tree"
Next in thread: Linus Torvalds: "Re: [GIT] Security subsystem updates for 3.3"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The most significant change here is the addition of the digital signature
verification API, for use by IMA, EVM and module loading. The rest is
general maintenance.

Please pull.

The following changes since commit 805a6af8dba5dfdd35ec35dc52ec0122400b2610:
Linus Torvalds (1):
Linux 3.2

are available in the git repository at:

git://selinuxproject.org/~jmorris/linux-security for-linus

Andrew Morton (1):
include/linux/security.h: fix security_inode_init_security() arg

Andy Shevchenko (1):
selinuxfs: remove custom hex_to_bin()

Dan Carpenter (1):
mpi/mpi-mpow: NULL dereference on allocation failure

David Howells (1):
KEYS: Give key types their own lockdep class for key->sem

Dmitry Kasatkin (10):
crypto: GnuPG based MPI lib - source files (part 1)
crypto: GnuPG based MPI lib - header files (part 2)
crypto: GnuPG based MPI lib - make files (part 3)
crypto: GnuPG based MPI lib - additional sources (part 4)
crypto: digital signature verification support
integrity: digital signature verification using multiple keyrings
evm: digital signature verification support
digsig: build dependency fix
evm: key must be set once during initialization
evm: prevent racing during tfm allocation

Greg Kroah-Hartman (1):
Security: tomoyo: add .gitignore file

James Morris (4):
Merge branch 'master'; commit 'v3.2-rc2' into next
Merge branch 'for-james' of git://github.com/srajiv/tpm into next
Merge branch 'next-evm-digsig' of git://git.kernel.org/.../kasatkin/linux-digsig into next
Merge branch 'next' into for-linus

Kees Cook (4):
Documentation: clarify the purpose of LSMs
apparmor: add missing rcu_dereference()
tomoyo: add missing rcu_dereference()
security: update security_file_mmap() docs

Rajiv Andrade (4):
TPM: Use vendor specific function for status probe
TPM: Export wait_for_stat for other vendor specific drivers
TPM: NSC and TIS drivers X86 dependency fix
TPM: fix transmit_cmd error logic

Roberto Sassu (2):
ima: free duplicate measurement memory
ima: fix invalid memory reference

Rusty Russell (1):
apparmor: fix module parameter handling

Stefan Berger (5):
tpm: Have tpm_get_timeouts return an error code
tpm: Cleanup tpm_continue_selftest
tpm: Introduce function to poll for result of self test
tpm_tis: Check return code from getting timeouts/durations
tpm_tis: add delay after aborting command

Thomas Meyer (1):
selinux: Casting (void *) value returned by kmalloc is useless

Documentation/digsig.txt | 96 ++
Documentation/security/00-INDEX | 2 +
Documentation/security/LSM.txt | 34 +
Documentation/security/credentials.txt | 6 +-
drivers/char/tpm/Kconfig | 2 +
drivers/char/tpm/tpm.c | 137 +++-
drivers/char/tpm/tpm.h | 9 +-
drivers/char/tpm/tpm_tis.c | 84 +--
include/linux/digsig.h | 64 ++
include/linux/key-type.h | 1 +
include/linux/mpi.h | 146 ++++
include/linux/security.h | 4 +-
lib/Kconfig | 25 +
lib/Makefile | 3 +
lib/digsig.c | 284 ++++++
lib/mpi/Makefile | 32 +
lib/mpi/generic_mpi-asm-defs.h | 4 +
lib/mpi/generic_mpih-add1.c | 61 ++
lib/mpi/generic_mpih-lshift.c | 63 ++
lib/mpi/generic_mpih-mul1.c | 57 ++
lib/mpi/generic_mpih-mul2.c | 60 ++
lib/mpi/generic_mpih-mul3.c | 61 ++
lib/mpi/generic_mpih-rshift.c | 63 ++
lib/mpi/generic_mpih-sub1.c | 60 ++
lib/mpi/longlong.h | 1478 ++++++++++++++++++++++++++++++++
lib/mpi/mpi-add.c | 234 +++++
lib/mpi/mpi-bit.c | 236 +++++
lib/mpi/mpi-cmp.c | 68 ++
lib/mpi/mpi-div.c | 333 +++++++
lib/mpi/mpi-gcd.c | 59 ++
lib/mpi/mpi-inline.c | 31 +
lib/mpi/mpi-inline.h | 122 +++
lib/mpi/mpi-internal.h | 261 ++++++
lib/mpi/mpi-inv.c | 187 ++++
lib/mpi/mpi-mpow.c | 134 +++
lib/mpi/mpi-mul.c | 194 +++++
lib/mpi/mpi-pow.c | 323 +++++++
lib/mpi/mpi-scan.c | 136 +++
lib/mpi/mpicoder.c | 365 ++++++++
lib/mpi/mpih-cmp.c | 56 ++
lib/mpi/mpih-div.c | 541 ++++++++++++
lib/mpi/mpih-mul.c | 527 ++++++++++++
lib/mpi/mpiutil.c | 208 +++++
security/apparmor/audit.c | 2 +-
security/apparmor/lsm.c | 6 +-
security/integrity/Kconfig | 14 +
security/integrity/Makefile | 1 +
security/integrity/digsig.c | 48 +
security/integrity/evm/evm.h | 12 +
security/integrity/evm/evm_crypto.c | 76 ++-
security/integrity/evm/evm_main.c | 94 ++-
security/integrity/ima/ima_api.c | 4 +-
security/integrity/ima/ima_queue.c | 17 +-
security/integrity/integrity.h | 21 +
security/keys/key.c | 3 +
security/selinux/selinuxfs.c | 14 +-
security/selinux/ss/conditional.c | 2 +-
security/tomoyo/.gitignore | 2 +
security/tomoyo/common.h | 2 +-
59 files changed, 7026 insertions(+), 143 deletions(-)
create mode 100644 Documentation/digsig.txt
create mode 100644 Documentation/security/LSM.txt
create mode 100644 include/linux/digsig.h
create mode 100644 include/linux/mpi.h
create mode 100644 lib/digsig.c
create mode 100644 lib/mpi/Makefile
create mode 100644 lib/mpi/generic_mpi-asm-defs.h
create mode 100644 lib/mpi/generic_mpih-add1.c
create mode 100644 lib/mpi/generic_mpih-lshift.c
create mode 100644 lib/mpi/generic_mpih-mul1.c
create mode 100644 lib/mpi/generic_mpih-mul2.c
create mode 100644 lib/mpi/generic_mpih-mul3.c
create mode 100644 lib/mpi/generic_mpih-rshift.c
create mode 100644 lib/mpi/generic_mpih-sub1.c
create mode 100644 lib/mpi/longlong.h
create mode 100644 lib/mpi/mpi-add.c
create mode 100644 lib/mpi/mpi-bit.c
create mode 100644 lib/mpi/mpi-cmp.c
create mode 100644 lib/mpi/mpi-div.c
create mode 100644 lib/mpi/mpi-gcd.c
create mode 100644 lib/mpi/mpi-inline.c
create mode 100644 lib/mpi/mpi-inline.h
create mode 100644 lib/mpi/mpi-internal.h
create mode 100644 lib/mpi/mpi-inv.c
create mode 100644 lib/mpi/mpi-mpow.c
create mode 100644 lib/mpi/mpi-mul.c
create mode 100644 lib/mpi/mpi-pow.c
create mode 100644 lib/mpi/mpi-scan.c
create mode 100644 lib/mpi/mpicoder.c
create mode 100644 lib/mpi/mpih-cmp.c
create mode 100644 lib/mpi/mpih-div.c
create mode 100644 lib/mpi/mpih-mul.c
create mode 100644 lib/mpi/mpiutil.c
create mode 100644 security/integrity/digsig.c
create mode 100644 security/tomoyo/.gitignore
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Next message: Namhyung Kim: "Re: [PATCH 03/11] block: block_bio_complete tracepoint was missing"
Previous message: Stephen Rothwell: "Re: linux-next: manual merge of the vfs tree with Linus' tree"
Next in thread: Linus Torvalds: "Re: [GIT] Security subsystem updates for 3.3"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]