linux/security/integrity
Mimi Zohar b80bed5c87 ima: Instantiate file_truncate and path_truncate hooks
Instantiate the file_truncate and path_truncate LSM hooks to reset the
action cache flags (IMA_DONE_MASK) as soon as truncation is requested,
so the file, based on policy, is re-collected, re-measured, re-audited,
and re-appraised on next access.

Tested-by: Frederick Lawler <fred@cloudflare.com>
Cc: stable@vger.kernel.org
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
2026-08-04 12:35:02 -04:00
..
evm evm: terminate and bound the evm_xattrs read buffer 2026-05-13 08:31:40 -04:00
ima ima: Instantiate file_truncate and path_truncate hooks 2026-08-04 12:35:02 -04:00
platform_certs integrity: Make arch_ima_get_secureboot integrity-wide 2026-03-05 11:10:08 -05:00
digsig_asymmetric.c integrity: Add support for sigv3 verification using ML-DSA keys 2026-05-13 08:21:19 -04:00
digsig.c ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures 2026-04-01 10:14:30 -04:00
efi_secureboot.c integrity: Make arch_ima_get_secureboot integrity-wide 2026-03-05 11:10:08 -05:00
iint.c ima,evm: move initcalls to the LSM framework 2025-10-22 19:24:27 -04:00
integrity_audit.c treewide: change inode->i_ino from unsigned long to u64 2026-03-06 14:31:28 +01:00
integrity.h ima: Define asymmetric_verify_v3() to verify IMA sigv3 signatures 2026-04-01 10:14:30 -04:00
Kconfig integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYS 2025-10-03 07:50:56 -04:00
Makefile integrity: Eliminate weak definition of arch_get_secureboot() 2026-03-13 11:37:13 -04:00