Linus Torvalds 1a35914f73 integrity-v6.6 ... -----BEGIN PGP SIGNATURE----- iIoEABYIADIWIQQdXVVFGN5XqKr1Hj7LwZzRsCrn5QUCZO0WoxQcem9oYXJAbGlu dXguaWJtLmNvbQAKCRDLwZzRsCrn5alsAP0UZQIKI2zEjFdtucgClcSouflIOC5i Hvtgv3qVFXPZQwEA2H/SGjigtH5NruVXECDZdrIfaGGvBhyeY72lbswXfQ0= =Gu8i -----END PGP SIGNATURE----- Merge tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity Pull integrity subsystem updates from Mimi Zohar: - With commit 099f26f22f ("integrity: machine keyring CA configuration") certificates may be loaded onto the IMA keyring, directly or indirectly signed by keys on either the "builtin" or the "machine" keyrings. With the ability for the system/machine owner to sign the IMA policy itself without needing to recompile the kernel, update the IMA architecture specific policy rules to require the IMA policy itself be signed. [ As commit 099f26f22f was upstreamed in linux-6.4, updating the IMA architecture specific policy now to require signed IMA policies may break userspace expectations. ] - IMA only checked the file data hash was not on the system blacklist keyring for files with an appended signature (e.g. kernel modules, Power kernel image). Check all file data hashes regardless of how it was signed - Code cleanup, and a kernel-doc update * tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity: kexec_lock: Replace kexec_mutex() by kexec_lock() in two comments ima: require signed IMA policy when UEFI secure boot is enabled integrity: Always reference the blacklist keyring with appraisal ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig		2023-08-30 09:16:56 -07:00
..
boot	powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node	2023-07-03 16:26:51 +10:00
configs	treewide: drop CONFIG_EMBEDDED	2023-08-21 13:46:25 -07:00
crypto	This update includes the following changes:	2023-08-29 11:23:29 -07:00
include	- An extensive rework of kexec and crash Kconfig from Eric DeVolder	2023-08-29 14:53:51 -07:00
kernel	integrity-v6.6	2023-08-30 09:16:56 -07:00
kexec
kvm	mm: lock vma explicitly before doing vm_flags_reset and vm_flags_reset_once	2023-08-21 13:37:46 -07:00
lib	powerpc: remove checks for binutils older than 2.25	2023-06-27 16:59:29 +10:00
math-emu
mm	- Some swap cleanups from Ma Wupeng ("fix WARN_ON in add_to_avail_list")	2023-08-29 14:25:26 -07:00
net
perf
platforms	- Some swap cleanups from Ma Wupeng ("fix WARN_ON in add_to_avail_list")	2023-08-29 14:25:26 -07:00
purgatory
sysdev	net: fs_enet: Remove stale prototypes from fsl_soc.c	2023-08-08 15:01:30 -07:00
tools
xmon	mm: remove arguments of show_mem()	2023-08-18 10:12:02 -07:00
Kbuild
Kconfig	- An extensive rework of kexec and crash Kconfig from Eric DeVolder	2023-08-29 14:53:51 -07:00
Kconfig.debug	powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y	2023-07-03 16:07:55 +10:00
Makefile	powerpc: remove checks for binutils older than 2.25	2023-06-27 16:59:29 +10:00
Makefile.postlink