[GIT] Security subsystem updates for 3.9

[James Morris]

This is basically a maintenance update for the TPM driver and EVM/IMA.

Please pull.


The following changes since commit 19f949f52599ba7c3f67a5897ac6be14bfcb1200:
  Linus Torvalds (1):
        Linux 3.8

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next

Andy Shevchenko (1):
      mpilib: use DIV_ROUND_UP and remove unused macros

Dmitry Kasatkin (14):
      evm: remove unused cleanup functions
      ima: set appraise status in fix mode only when xattr is fixed
      ima: remove enforce checking duplication
      ima: remove security.ima hexdump
      integrity: reduce storage size for ima_status and evm_status
      ima: move full pathname resolution to separate function
      ima: forbid write access to files with digital signatures
      ima: added policy support for 'security.ima' type
      digsig: remove unnecessary memory allocation and copying
      evm: add file system uuid to EVM hmac
      ima: add policy support for file system uuid
      ima: use new crypto_shash API instead of old crypto_hash
      ima: rename hash calculation functions
      ima: digital signature verification using asymmetric keys

James Morris (1):
      Merge tag 'v3.8-rc2' into next

Jason Gunthorpe (4):
      TPM: Issue TPM_STARTUP at driver load if the TPM has not been started
      TPM: Switch to __packed instead of __attribute__((packed))
      TPM: Work around buggy TPMs that block during continue self test
      TPM: Wait for TPM_ACCESS tpmRegValidSts to go high at startup

Kent Yoder (8):
      tpm: add documentation for sysfs interfaces
      tpm: rename vendor data to priv and provide an accessor
      tpm: STM i2c driver fixes
      tpm: rename STM driver to match other i2c drivers
      tpm_i2c_stm_st33: fix oops when i2c client is unavailable
      tpm_i2c_stm_st33: removed unused variables/code
      tpm_tis: check pnp_acpi_device return code
      tpm/ibmvtpm: build only when IBM pseries is configured

Mathias Leblanc (2):
      TPM: STMicroelectronics ST33 I2C KERNEL 3.x
      TPM: STMicroelectronics ST33 I2C BUILD STUFF

Mimi Zohar (5):
      ima: re-initialize IMA policy LSM info
      ima: rename FILE_MMAP to MMAP_CHECK
      ima: increase iint flag size
      ima: per hook cache integrity appraisal status
      ima: differentiate appraise status only for hook specific rules

Peter Huewe (8):
      char/tpm: Remove duplicated lookup table
      char/tpm: simplify duration calculation and eliminate smatch warning.
      char/tpm: Use true and false for bools
      char/tpm: Use struct dev_pm_ops for power management
      char/tpm/tpm_i2c_stm_st33: Don't use memcpy for one byte assignment
      char/tpm/tpm_i2c_stm_st33: Remove __devexit attribute
      char/tpm/tpm_i2c_stm_st33: remove dead assignment in tpm_st33_i2c_probe
      char/tpm/tpm_i2c_stm_st33: drop temporary variable for return value

Stefan Berger (3):
      tpm: Store TPM vendor ID
      tpm: Fix cancellation of TPM commands (polling mode)
      tpm: Fix cancellation of TPM commands (interrupt mode)

 Documentation/ABI/stable/sysfs-class-tpm |  185 +++++++
 Documentation/ABI/testing/ima_policy     |   10 +-
 drivers/char/tpm/Kconfig                 |   12 +-
 drivers/char/tpm/Makefile                |    1 +
 drivers/char/tpm/tpm.c                   |  114 ++--
 drivers/char/tpm/tpm.h                   |   52 +-
 drivers/char/tpm/tpm_acpi.c              |    8 +-
 drivers/char/tpm/tpm_atmel.c             |    7 +-
 drivers/char/tpm/tpm_i2c_infineon.c      |    7 +-
 drivers/char/tpm/tpm_i2c_stm_st33.c      |  887 ++++++++++++++++++++++++++++++
 drivers/char/tpm/tpm_i2c_stm_st33.h      |   61 ++
 drivers/char/tpm/tpm_ibmvtpm.c           |   15 +-
 drivers/char/tpm/tpm_nsc.c               |    7 +-
 drivers/char/tpm/tpm_tis.c               |   64 ++-
 lib/digsig.c                             |   41 +-
 lib/mpi/mpi-internal.h                   |    4 -
 lib/mpi/mpicoder.c                       |    8 +-
 security/integrity/Kconfig               |   12 +
 security/integrity/Makefile              |    1 +
 security/integrity/digsig.c              |   11 +-
 security/integrity/digsig_asymmetric.c   |  115 ++++
 security/integrity/evm/Kconfig           |   13 +
 security/integrity/evm/evm.h             |    2 +-
 security/integrity/evm/evm_crypto.c      |    3 +
 security/integrity/evm/evm_main.c        |   10 +-
 security/integrity/evm/evm_secfs.c       |    6 -
 security/integrity/iint.c                |   10 +-
 security/integrity/ima/ima.h             |   21 +-
 security/integrity/ima/ima_api.c         |   27 +-
 security/integrity/ima/ima_appraise.c    |   92 +++-
 security/integrity/ima/ima_crypto.c      |   81 ++-
 security/integrity/ima/ima_init.c        |    3 +
 security/integrity/ima/ima_main.c        |  133 ++---
 security/integrity/ima/ima_policy.c      |  138 ++++-
 security/integrity/integrity.h           |   62 ++-
 35 files changed, 1914 insertions(+), 309 deletions(-)
 create mode 100644 Documentation/ABI/stable/sysfs-class-tpm
 create mode 100644 drivers/char/tpm/tpm_i2c_stm_st33.c
 create mode 100644 drivers/char/tpm/tpm_i2c_stm_st33.h
 create mode 100644 security/integrity/digsig_asymmetric.c
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/