• Linus Torvalds's avatar
    Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security · bb7aeae3
    Linus Torvalds authored
    Pull security layer updates from James Morris:
     "There are a bunch of fixes to the TPM, IMA, and Keys code, with minor
      fixes scattered across the subsystem.
    
      IMA now requires signed policy, and that policy is also now measured
      and appraised"
    
    * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (67 commits)
      X.509: Make algo identifiers text instead of enum
      akcipher: Move the RSA DER encoding check to the crypto layer
      crypto: Add hash param to pkcs1pad
      sign-file: fix build with CMS support disabled
      MAINTAINERS: update tpmdd urls
      MODSIGN: linux/string.h should be #included to get memcpy()
      certs: Fix misaligned data in extra certificate list
      X.509: Handle midnight alternative notation in GeneralizedTime
      X.509: Support leap seconds
      Handle ISO 8601 leap seconds and encodings of midnight in mktime64()
      X.509: Fix leap year handling again
      PKCS#7: fix unitialized boolean 'want'
      firmware: change kernel read fail to dev_dbg()
      KEYS: Use the symbol value for list size, updated by scripts/insert-sys-cert
      KEYS: Reserve an extra certificate symbol for inserting without recompiling
      modsign: hide openssl output in silent builds
      tpm_tis: fix build warning with tpm_tis_resume
      ima: require signed IMA policy
      ima: measure and appraise the IMA policy itself
      ima: load policy using path
      ...
    bb7aeae3
i386_defconfig 7.12 KB