Mimi Zohar 95b3cdafd7 ima: instantiate the bprm_creds_for_exec() hook ... Like direct file execution (e.g. ./script.sh), indirect file execution (e.g. sh script.sh) needs to be measured and appraised. Instantiate the new security_bprm_creds_for_exec() hook to measure and verify the indirect file's integrity. Unlike direct file execution, indirect file execution is optionally enforced by the interpreter. Differentiate kernel and userspace enforced integrity audit messages. Co-developed-by: Roberto Sassu <roberto.sassu@huawei.com> Signed-off-by: Roberto Sassu <roberto.sassu@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> Tested-by: Stefan Berger <stefanb@linux.ibm.com> Reviewed-by: Mickaël Salaün <mic@digikod.net> Signed-off-by: Mickaël Salaün <mic@digikod.net> Link: https://lore.kernel.org/r/20241212174223.389435-9-mic@digikod.net Signed-off-by: Kees Cook <kees@kernel.org>		2024-12-18 17:00:29 -08:00
..
apparmor	module: Convert symbol namespace to string literal	2024-12-02 11:34:44 -08:00
bpf	bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0	2024-09-11 10:11:36 -07:00
integrity	ima: instantiate the bprm_creds_for_exec() hook	2024-12-18 17:00:29 -08:00
ipe	ipe: fallback to platform keyring also if key in trusted keyring is rejected	2024-10-18 12:14:53 -07:00
keys	KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation	2024-11-04 21:24:24 +02:00
landlock	the bulk of struct fd memory safety stuff	2024-11-18 12:24:06 -08:00
loadpin	fdget(), more trivial conversions	2024-11-03 01:28:06 -05:00
lockdown	lockdown: Make lockdown_lsmid static	2024-08-15 12:11:42 -04:00
safesetid
selinux	selinux: use sk_to_full_sk() in selinux_ip_output()	2024-11-30 13:24:33 -08:00
smack	lsm: remove lsm_prop scaffolding	2024-10-11 14:34:16 -04:00
tomoyo	tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM support	2024-10-04 11:41:22 -04:00
yama	sysctl: treewide: constify the ctl_table argument of proc_handlers	2024-07-24 20:59:29 +02:00
commoncap.c	security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits	2024-12-18 17:00:29 -08:00
device_cgroup.c
inode.c	lsm: Use IS_ERR_OR_NULL() helper function	2024-08-29 11:12:13 -04:00
Kconfig	lsm/stable-6.12 PR 20240911	2024-09-16 18:19:47 +02:00
Kconfig.hardening	hardening: Adjust dependencies in selection of MODVERSIONS	2024-09-28 13:56:03 -07:00
lsm_audit.c	security: replace memcpy() with get_task_comm()	2024-11-05 17:12:29 -08:00
lsm_syscalls.c
Makefile	lsm: add IPE lsm	2024-08-19 22:36:26 -04:00
min_addr.c	sysctl: treewide: constify the ctl_table argument of proc_handlers	2024-07-24 20:59:29 +02:00
security.c	exec: Add a new AT_EXECVE_CHECK flag to execveat(2)	2024-12-18 17:00:29 -08:00