Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Rebase the lockdown sysrq patch to work with upstream | Jeremy Cline | 2019-10-02 | 1 | -286/+0 |
| | | | | | | | Upstream finally merged the lockdown patches, adjust the SysRq patch to work with the upstreamed version. Signed-off-by: Jeremy Cline <jcline@redhat.com> | ||||
* | Linux v5.3-13236-g97f9a3c4eee5 | Jeremy Cline | 2019-10-01 | 1 | -1883/+0 |
| | | | | | | | This is a first pass at getting the secureboot patches working with the upstream lockdown patches that got merged. The final patch from our lockdown set is the sysrq patch which also needs work. For the present it is not applied. | ||||
* | Linux v5.2-10808-g9637d517347e | Laura Abbott | 2019-07-16 | 1 | -165/+194 |
| | |||||
* | Fix rbhz 1658675 again | Jeremy Cline | 2019-06-06 | 1 | -0/+58 |
| | | | | | This patch got dropped with the latest rebase to upstream's version of the lockdown patches. | ||||
* | Linux v5.2-rc3-37-g156c05917e09 | Justin M. Forbes | 2019-06-06 | 1 | -0/+286 |
| | |||||
* | Fix up the kexec IMA patch | Jeremy Cline | 2019-04-15 | 1 | -4/+4 |
| | |||||
* | Rebase the kernel lockdown patch set | Jeremy Cline | 2019-04-15 | 1 | -551/+797 |
| | | | | | | | | | | | | | | | | Use the latest version of the kernel lockdown patch set. This includes a few configuration renames: CONFIG_KEXEC_VERIFY_SIG became CONFIG_KEXEC_SIG and CONFIG_KEXEC_SIG_FORCE was added. CONFIG_KEXEC_SIG_FORCE=n because the "kexec_file: Restrict at runtime if the kernel is locked down" patch enforces the signature requirement when the kernel is locked down. CONFIG_LOCK_DOWN_MANDATORY got renamed to CONFIG_LOCK_DOWN_KERNEL_FORCE and remains false as LOCK_DOWN_IN_EFI_SECURE_BOOT covers enabling it for EFI Secure Boot users. Finally, the SysRq patches got dropped for the present. | ||||
* | Linux v5.0-7001-g610cd4eadec4 | Jeremy Cline | 2019-03-08 | 1 | -291/+205 |
| | |||||
* | Linux v5.0-6399-gf90d64483ebd | Jeremy Cline | 2019-03-07 | 1 | -1/+1 |
| | |||||
* | lockdown update for S390 | Justin M. Forbes | 2019-01-10 | 1 | -0/+146 |
| | |||||
* | Linux v4.20-10911-g645ff1e8e704 | Laura Abbott | 2019-01-03 | 1 | -233/+0 |
| | | | | | Dropped part of the efi-lockdown patchset for IMA until conflicts get resolved. | ||||
* | Linux v4.20-9163-g195303136f19 | Laura Abbott | 2018-12-30 | 1 | -6/+6 |
| | |||||
* | Remove bpf restriction for now, revisit (rhbz 1622986) | Justin M. Forbes | 2018-08-28 | 1 | -39/+0 |
| | |||||
* | Linux v4.18-8895-g1f7a4c73a739 | Jeremy Cline | 2018-08-18 | 1 | -25/+27 |
| | |||||
* | Linux v4.18-7873-gf91e654474d4 | Jeremy Cline | 2018-08-16 | 1 | -20/+21 |
| | |||||
* | Linux v4.18-rc1 | Laura Abbott | 2018-06-18 | 1 | -1/+1 |
| | |||||
* | Linux v4.17-11782-gbe779f03d563 | Laura Abbott | 2018-06-13 | 1 | -3/+3 |
| | |||||
* | Linux v4.17-7997-g68abbe729567 | Laura Abbott | 2018-06-08 | 1 | -10/+8 |
| | |||||
* | Linux v4.17-6625-g1c8c5a9d38f6 | Laura Abbott | 2018-06-07 | 1 | -2/+2 |
| | |||||
* | Linux v4.17-3754-g135c5504a600 | Laura Abbott | 2018-06-06 | 1 | -4/+4 |
| | |||||
* | Linux v4.17-rc1 | Justin M. Forbes | 2018-04-16 | 1 | -785/+237 |
| | |||||
* | Linux v4.16-11766-ge241e3f2bf97 | Justin M. Forbes | 2018-04-12 | 1 | -2/+2 |
| | |||||
* | Linux v4.16-9576-g38c23685b273 | Justin M. Forbes | 2018-04-06 | 1 | -45/+0 |
| | |||||
* | Linux v4.16-2520-g642e7fd23353 | Justin M. Forbes | 2018-04-03 | 1 | -2/+2 |
| | |||||
* | Fix efi-lockdown.patch for upstream BPF change | Jeremy Cline | 2018-03-23 | 1 | -1/+1 |
| | | | | | | | Commit 0fa4fe85f472 ("bpf: skip unnecessary capability check") switched the if statement around. Signed-off-by: Jeremy Cline <jeremy@jcline.org> | ||||
* | Update efi-lockdown patch with current. | Justin M. Forbes | 2018-03-12 | 1 | -337/+978 |
| | |||||
* | Linux v4.15-11704-ga2e5790d8416 | Justin M. Forbes | 2018-02-07 | 1 | -1/+1 |
| | |||||
* | Linux v4.14-12375-g2dcd9c71c1ff | Laura Abbott | 2017-11-17 | 1 | -14/+15 |
| | |||||
* | Linux v4.14-4050-g37cb8e1f8e10 | Laura Abbott | 2017-11-15 | 1 | -8/+8 |
| | |||||
* | Linux v4.14-rc6-50-g567825502730 | Justin M. Forbes | 2017-10-26 | 1 | -135/+129 |
| | |||||
* | Linux v4.14-rc5-94-g9a27ded2195a | Justin M. Forbes | 2017-10-20 | 1 | -609/+319 |
| | |||||
* | Linux v4.14-rc5-31-g73d3393ada4f | Justin M. Forbes | 2017-10-19 | 1 | -589/+1188 |
| | |||||
* | Linux v4.13-11197-gf007cad159e9 | Justin M. Forbes | 2017-09-11 | 1 | -1/+1 |
| | |||||
* | Linux v4.13-4257-ge7d0c41ecc2e | Justin M. Forbes | 2017-09-06 | 1 | -6/+6 |
| | |||||
* | Linux v4.11-11413-g2868b25 | Justin M. Forbes | 2017-05-09 | 1 | -7/+7 |
| | |||||
* | Linux v4.11-1464-gd3b5d35 | Justin M. Forbes | 2017-05-02 | 1 | -76/+2 |
| | |||||
* | Linux v4.10-6476-gbc49a78 | Laura Abbott | 2017-02-23 | 1 | -201/+201 |
| | |||||
* | Update efi-lockdown for 4.11 merge | Justin M. Forbes | 2017-02-21 | 1 | -696/+20 |
| | |||||
* | Linux v4.10-rc4 | Justin M. Forbes | 2017-01-16 | 1 | -2/+2 |
| | |||||
* | Linux v4.9-7150-gcdb98c2 | Justin M. Forbes | 2016-12-14 | 1 | -0/+2159 |