You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Biggers 0f66870b8c fs-verity: support builtin file signatures ... To meet some users' needs, add optional support for having fs-verity handle a portion of the authentication policy in the kernel. An ".fs-verity" keyring is created to which X.509 certificates can be added; then a sysctl 'fs.verity.require_signatures' can be set to cause the kernel to enforce that all fs-verity files contain a signature of their file measurement by a key in this keyring. See the "Built-in signature verification" section of Documentation/filesystems/fsverity.rst for the full documentation. Reviewed-by: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Eric Biggers <ebiggers@google.com>		5 years ago
..
Kconfig	fs-verity: support builtin file signatures	5 years ago
Makefile	fs-verity: support builtin file signatures	5 years ago
enable.c	fs-verity: support builtin file signatures	5 years ago
fsverity_private.h	fs-verity: support builtin file signatures	5 years ago
hash_algs.c	…
init.c	fs-verity: support builtin file signatures	5 years ago
measure.c	…
open.c	fs-verity: support builtin file signatures	5 years ago
signature.c	fs-verity: support builtin file signatures	5 years ago
verify.c	fs-verity: support builtin file signatures	5 years ago