| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-08-12 | fs-verity: support builtin file signatures | Eric Biggers | |
| To meet some users' needs, add optional support for having fs-verity handle a portion of the authentication policy in the kernel. An ".fs-verity" keyring is created to which X.509 certificates can be added; then a sysctl 'fs.verity.require_signatures' can be set to cause the kernel to enforce that all fs-verity files contain a signature of their file measurement by a key in this keyring. See the "Built-in signature verification" section of Documentation/filesystems/fsverity.rst for the full documentation. Reviewed-by: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Eric Biggers <ebiggers@google.com> | |||
| 2019-07-28 | fs-verity: add Kconfig and the helper functions for hashing | Eric Biggers | |
| Add the beginnings of the fs/verity/ support layer, including the Kconfig option and various helper functions for hashing. To start, only SHA-256 is supported, but other hash algorithms can easily be added. Reviewed-by: Theodore Ts'o <tytso@mit.edu> Reviewed-by: Jaegeuk Kim <jaegeuk@kernel.org> Signed-off-by: Eric Biggers <ebiggers@google.com> | |||
 |
index : linux.git | |
| Linux kernel | git repo user |
| aboutsummaryrefslogtreecommitdiff |