)]}' { "log": [ { "commit": "33673dcb372b5d8179c22127ca71deb5f3dc7016", "tree": "d182e9dc6aa127375a92b5eb619d6cd2ddc23ce7", "parents": [ "fe9453a1dcb5fb146f9653267e78f4a558066f6f", "5b2660326039a32b28766cb4c1a8b1bdcfadc375" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 08:18:12 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 08:18:12 2013 -0800" }, "message": "Merge branch \u0027next\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security\n\nPull security subsystem updates from James Morris:\n \"This is basically a maintenance update for the TPM driver and EVM/IMA\"\n\nFix up conflicts in lib/digsig.c and security/integrity/ima/ima_main.c\n\n* \u0027next\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (45 commits)\n tpm/ibmvtpm: build only when IBM pseries is configured\n ima: digital signature verification using asymmetric keys\n ima: rename hash calculation functions\n ima: use new crypto_shash API instead of old crypto_hash\n ima: add policy support for file system uuid\n evm: add file system uuid to EVM hmac\n tpm_tis: check pnp_acpi_device return code\n char/tpm/tpm_i2c_stm_st33: drop temporary variable for return value\n char/tpm/tpm_i2c_stm_st33: remove dead assignment in tpm_st33_i2c_probe\n char/tpm/tpm_i2c_stm_st33: Remove __devexit attribute\n char/tpm/tpm_i2c_stm_st33: Don\u0027t use memcpy for one byte assignment\n tpm_i2c_stm_st33: removed unused variables/code\n TPM: Wait for TPM_ACCESS tpmRegValidSts to go high at startup\n tpm: Fix cancellation of TPM commands (interrupt mode)\n tpm: Fix cancellation of TPM commands (polling mode)\n tpm: Store TPM vendor ID\n TPM: Work around buggy TPMs that block during continue self test\n tpm_i2c_stm_st33: fix oops when i2c client is unavailable\n char/tpm: Use struct dev_pm_ops for power management\n TPM: STMicroelectronics ST33 I2C BUILD STUFF\n ...\n" }, { "commit": "26d438457ed1b99b6cb26d8f694e8d3de336f9d8", "tree": "9a6f3cd4f009fc0bff888e52a2c00af757b50e58", "parents": [ "5a73fcfa8875a94c2956e7ff8fba54d31a3e2854" ], "author": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Wed Jan 30 11:30:05 2013 +0200" }, "committer": { "name": "James Morris", "email": "james.l.morris@oracle.com", "time": "Fri Feb 01 16:28:24 2013 +1100" }, "message": "digsig: remove unnecessary memory allocation and copying\n\nIn existing use case, copying of the decoded data is unnecessary in\npkcs_1_v1_5_decode_emsa. It is just enough to get pointer to the message.\nRemoving copying and extra buffer allocation.\n\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nSigned-off-by: James Morris \u003cjames.l.morris@oracle.com\u003e\n" }, { "commit": "7810cc1e7721220f1ed2a23ca95113d6434f6dcd", "tree": "4642aac5aae21cc87917875b150ef516cc666868", "parents": [ "88b62b915b0b7e25870eb0604ed9a92ba4bfc9f7" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Jan 25 16:54:20 2013 +0200" }, "committer": { "name": "James Morris", "email": "james.l.morris@oracle.com", "time": "Fri Feb 01 15:59:33 2013 +1100" }, "message": "digsig: Fix memory leakage in digsig_verify_rsa()\n\ndigsig_verify_rsa() does not free kmalloc\u0027ed buffer returned by\nmpi_get_buffer().\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: James Morris \u003cjames.l.morris@oracle.com\u003e\n" }, { "commit": "bc01637a80f5b670bd70a0279d3f93fa8de1c96d", "tree": "55913071b502e2adc7a2dd4daf3b5b92c5e06b65", "parents": [ "8507876aaada8a2cf68ebccdf1d056465dd1fc11" ], "author": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Wed Sep 12 13:26:55 2012 +0300" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 13 09:13:02 2012 +0800" }, "message": "digsig: add hash size comparision on signature verification\n\nWhen pkcs_1_v1_5_decode_emsa() returns without error and hash sizes do\nnot match, hash comparision is not done and digsig_verify_rsa() returns\nno error. This is a bug and this patch fixes it.\n\nThe bug was introduced in v3.3 by commit b35e286a640f (\"lib/digsig:\npkcs_1_v1_5_decode_emsa cleanup\").\n\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "86f8bedc9e1a8ddb4f1d9ff1f0c1229cc0797d6d", "tree": "a0b67fa9e778cba871b8135cf6976066d11af83b", "parents": [ "43b2c0aeaab2237996a72f9b9d7952ba82d56913" ], "author": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Thu Jan 26 19:13:24 2012 +0200" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Thu Feb 02 00:24:04 2012 +1100" }, "message": "lib/digsig: checks for NULL return value\n\nmpi_read_from_buffer() return value must not be NULL.\n\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nReviewed-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "b35e286a640f31d619a637332972498b51f3fd90", "tree": "66ea75588c31570245b7048693e15c72ce2ded34", "parents": [ "f58a08152ce4198a2a1da162b97ecf8264c24866" ], "author": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Thu Jan 26 19:13:26 2012 +0200" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Thu Feb 02 00:23:39 2012 +1100" }, "message": "lib/digsig: pkcs_1_v1_5_decode_emsa cleanup\n\nRemoved useless \u0027is_valid\u0027 variable in pkcs_1_v1_5_decode_emsa(),\nwhich was inhereted from original code. Client now uses return value\nto check for an error.\n\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nReviewed-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "f58a08152ce4198a2a1da162b97ecf8264c24866", "tree": "e430ef22210d8d6d41c0b7253978558a0f15f7a5", "parents": [ "bc95eeadf5c6fd9e9840898a83a93718a0114b6d" ], "author": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Thu Jan 26 19:13:25 2012 +0200" }, "committer": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Thu Feb 02 00:23:38 2012 +1100" }, "message": "lib/digsig: additional sanity checks against badly formated key payload\n\nAdded sanity checks for possible wrongly formatted key payload data:\n- minimum key payload size\n- zero modulus length\n- corrected upper key payload boundary.\n\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nReviewed-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "051dbb918c7fb7da8e64a2cd0d804ba73399709f", "tree": "34d547e74ef6edb7feeda4a8291b221cc016c393", "parents": [ "7e8dec918ef8e0f68b4937c3c50fa57002077a4d" ], "author": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Fri Oct 14 15:25:16 2011 +0300" }, "committer": { "name": "Dmitry Kasatkin", "email": "dmitry.kasatkin@intel.com", "time": "Wed Nov 09 12:10:37 2011 +0200" }, "message": "crypto: digital signature verification support\n\nThis patch implements RSA digital signature verification using GnuPG library.\n\nThe format of the signature and the public key is defined by their respective\nheaders. The signature header contains version information, algorithm,\nand keyid, which was used to generate the signature.\nThe key header contains version and algorythim type.\nThe payload of the signature and the key are multi-precision integers.\n\nThe signing and key management utilities evm-utils provide functionality\nto generate signatures and load keys into the kernel keyring.\nWhen the key is added to the kernel keyring, the keyid defines the name\nof the key.\n\nSigned-off-by: Dmitry Kasatkin \u003cdmitry.kasatkin@intel.com\u003e\nAcked-by: Mimi Zohar \u003czohar@us.ibm.com\u003e\n" } ] }