mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Mimi Zohar <zohar@linux.ibm.com>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: linux-integrity <linux-integrity@vger.kernel.org>,
	linux-kernel <linux-kernel@vger.kernel.org>,
	Roberto Sassu <roberto.sassu@huaweicloud.com>
Subject: [GIT PULL] integrity: subsystem updates for v6.13
Date: Fri, 17 Jan 2025 18:02:05 -0500	[thread overview]
Message-ID: <2c3b092932bac0945b6d71326a726e09a8f50ee8.camel@linux.ibm.com> (raw)

Hi Linus,

There's just a couple of changes: 2 kernel messages addressed, a measurement policy
collision addressed, and 1 policy cleanup.                      
                                                                                
Please note that the contents of the IMA measurement list is potentially affected.
The builtin tmpfs IMA policy rule change might introduce additional measurements,
while detecting a reboot might eliminate some measurements.

Thanks,

Mimi


The following changes since commit fac04efc5c793dccbd07e2d59af9f90b7fc0dca4:

  Linux 6.13-rc2 (2024-12-08 14:03:39 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git/ tags/integrity-v6.13

for you to fetch changes up to 4785ed362a24d4f37ee0eb4403f587fee886f8da:

  ima: ignore suffixed policy rule comments (2025-01-03 10:18:43 -0500)

----------------------------------------------------------------
integrity-v6.13

----------------------------------------------------------------
Breno Leitao (1):
      ima: kexec: silence RCU list traversal warning

Mimi Zohar (2):
      ima: limit the builtin 'tcb' dont_measure tmpfs policy rule
      ima: ignore suffixed policy rule comments

Stefan Berger (1):
      ima: Suspend PCR extends and log appends when rebooting

 security/integrity/ima/ima.h        |  1 +
 security/integrity/ima/ima_init.c   |  2 ++
 security/integrity/ima/ima_kexec.c  |  3 ++-
 security/integrity/ima/ima_policy.c |  5 +++--
 security/integrity/ima/ima_queue.c  | 44 +++++++++++++++++++++++++++++++++++++
 5 files changed, 52 insertions(+), 3 deletions(-)


             reply	other threads:[~2025-01-17 23:02 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-01-17 23:02 Mimi Zohar [this message]
2025-01-17 23:30 ` [GIT PULL] integrity: subsystem updates for v6.13 (please ignore) Mimi Zohar
2025-01-22  4:15 ` [GIT PULL] integrity: subsystem updates for v6.13 pr-tracker-bot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=2c3b092932bac0945b6d71326a726e09a8f50ee8.camel@linux.ibm.com \
    --to=zohar@linux.ibm.com \
    --cc=linux-integrity@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=roberto.sassu@huaweicloud.com \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®