Mimi Zohar b80bed5c87 ima: Instantiate file_truncate and path_truncate hooks ...

Instantiate the file_truncate and path_truncate LSM hooks to reset the
action cache flags (IMA_DONE_MASK) as soon as truncation is requested,
so the file, based on policy, is re-collected, re-measured, re-audited,
and re-appraised on next access.

Tested-by: Frederick Lawler <fred@cloudflare.com>
Cc: stable@vger.kernel.org
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2026-08-04 12:35:02 -04:00

..

evm

evm: terminate and bound the evm_xattrs read buffer

2026-05-13 08:31:40 -04:00

ima

ima: Instantiate file_truncate and path_truncate hooks

2026-08-04 12:35:02 -04:00

platform_certs

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

digsig_asymmetric.c

integrity: Add support for sigv3 verification using ML-DSA keys

2026-05-13 08:21:19 -04:00

digsig.c

ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures

2026-04-01 10:14:30 -04:00

efi_secureboot.c

integrity: Make arch_ima_get_secureboot integrity-wide

2026-03-05 11:10:08 -05:00

iint.c

ima,evm: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

integrity_audit.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

integrity.h

ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures

2026-04-01 10:14:30 -04:00

Kconfig

integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYS

2025-10-03 07:50:56 -04:00

Makefile

integrity: Eliminate weak definition of arch_get_secureboot()

2026-03-13 11:37:13 -04:00