[GIT PULL] security: integrity subsystem updates for 4.20

From: James Morris
Date: Thu Oct 25 2018 - 05:32:22 EST


Please pull.

>From Mimi: "This pull request contains a couple of bug fixes, including
one for a recent problem with calculating file hashes on overlayfs, and
some code cleanup."

---

The following changes since commit e6123c524064a571616ec978b1317f1696eff0ae:

security: fix LSM description location (2018-10-09 12:18:38 -0700)

are available in the Git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next-integrity

for you to fetch changes up to 34bccd61b139dbb452421aebf480e7af5f7a12ed:

MAINTAINERS: add Jarkko as maintainer for trusted keys (2018-10-11 12:10:16 -0400)

----------------------------------------------------------------
Eric Biggers (4):
vfs: require i_size <= SIZE_MAX in kernel_read_file()
security/integrity: constify some read-only data
security/integrity: remove unnecessary 'init_keyring' variable
ima: fix showing large 'violations' or 'runtime_measurements_count'

Goldwyn Rodrigues (1):
ima: open a new file instance if no read permissions

Mimi Zohar (1):
MAINTAINERS: add Jarkko as maintainer for trusted keys

MAINTAINERS | 1 +
fs/exec.c | 8 +++---
security/integrity/digsig.c | 10 ++-----
security/integrity/evm/evm_crypto.c | 4 +--
security/integrity/ima/ima.h | 2 +-
security/integrity/ima/ima_api.c | 3 +-
security/integrity/ima/ima_crypto.c | 54 ++++++++++++++++++++++-------------
security/integrity/ima/ima_fs.c | 9 +++---
security/integrity/ima/ima_init.c | 2 +-
security/integrity/ima/ima_main.c | 2 +-
security/integrity/ima/ima_template.c | 11 +++----
11 files changed, 59 insertions(+), 47 deletions(-)