lkml.org 
[lkml]   [2023]   [Aug]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    Subject[GIT PULL] tpmdd changes for v6.6
    Date
      Merge tag 'nfsd-6.5-4' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux (2023-08-17 16:38:48 +0200)

    are available in the Git repository at:

    git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git tags/tpmdd-v6.6

    for you to fetch changes up to 218a2680624cba1611e3dfc7d9b646d240e5f855:

    certs: Reference revocation list for all keyrings (2023-08-17 20:12:41 +0000)

    ----------------------------------------------------------------
    Hi,

    Contents:

    - Restrict linking of keys to .ima and .evm keyrings based on
    digitalSignature attribute in the certificate.
    - PowerVM: load machine owner keys into the .machine [1] keyring.
    - PowerVM: load module signing keys into the secondary trusted keyring
    (keys blessed by the vendor).
    - tpm_tis_spi: half-duplex transfer mode
    - tpm_tis: retry corrupted transfers
    - Apply revocation list (.mokx) to an all system keyrings (e.g. .machine
    keyring).

    [1] https://blogs.oracle.com/linux/post/the-machine-keyring

    BR, Jarkko

    ----------------------------------------------------------------
    Alexander Steffen (3):
    tpm_tis: Move CRC check to generic send routine
    tpm_tis: Use responseRetry to recover from data transfer errors
    tpm_tis: Resend command to recover from data transfer errors

    Azeem Shaikh (1):
    KEYS: Replace all non-returning strlcpy with strscpy

    Colin Ian King (1):
    tpm: remove redundant variable len

    Eric Snowberg (3):
    KEYS: DigitalSignature link restriction
    integrity: Enforce digitalSignature usage in the ima and evm keyrings
    certs: Reference revocation list for all keyrings

    Jarkko Sakkinen (1):
    tpm_tis: Revert "tpm_tis: Disable interrupts on ThinkPad T490s"

    Krishna Yarlagadda (1):
    tpm_tis_spi: Add hardware wait polling

    Li Zetao (1):
    tpm/tpm_tis_synquacer: Use module_platform_driver macro to simplify the code

    Nayna Jain (6):
    integrity: PowerVM support for loading CA keys on machine keyring
    integrity: ignore keys failing CA restrictions on non-UEFI platform
    integrity: remove global variable from machine_keyring.c
    integrity: check whether imputed trust is enabled
    integrity: PowerVM machine keyring enablement
    integrity: PowerVM support for loading third party code signing keys

    Documentation/admin-guide/kernel-parameters.txt | 7 ++
    certs/system_keyring.c | 91 +++++++++++++++++++--
    crypto/asymmetric_keys/restrict.c | 44 ++++++++++
    drivers/char/tpm/eventlog/tpm1.c | 3 +-
    drivers/char/tpm/tpm_tis.c | 93 +---------------------
    drivers/char/tpm/tpm_tis_core.c | 60 ++++++++++----
    drivers/char/tpm/tpm_tis_core.h | 1 +
    drivers/char/tpm/tpm_tis_spi_main.c | 91 ++++++++++++++++++++-
    drivers/char/tpm/tpm_tis_synquacer.c | 18 +----
    include/crypto/public_key.h | 12 +++
    include/keys/system_keyring.h | 14 ++++
    security/integrity/Kconfig | 4 +-
    security/integrity/digsig.c | 6 +-
    security/integrity/evm/Kconfig | 3 +-
    security/integrity/ima/Kconfig | 3 +-
    security/integrity/integrity.h | 5 +-
    .../integrity/platform_certs/keyring_handler.c | 19 ++++-
    .../integrity/platform_certs/keyring_handler.h | 10 +++
    security/integrity/platform_certs/load_powerpc.c | 34 ++++++++
    .../integrity/platform_certs/machine_keyring.c | 22 ++++-
    security/keys/request_key_auth.c | 2 +-
    21 files changed, 394 insertions(+), 148 deletions(-)

    \
     
     \ /
      Last update: 2023-08-17 22:21    [W:8.848 / U:0.020 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site