From: James Morris <james.morris@microsoft.com>
Date: Thu, 14 Feb 2019 18:55:42 +0000 (-0800)
Subject: Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar... 
X-Git-Url: http://git.cdn.openwrt.org/?a=commitdiff_plain;h=2e884fc9759d8816630d3c30694721a39b7396e0;p=openwrt%2Fstaging%2Fblogic.git

Merge branch 'next-integrity' of git://git./linux/kernel/git/zohar/linux-integrity into next-integrity

From: Mimi Zohar <zohar@linux.ibm.com>

Linux 5.0 introduced the platform keyring to allow verifying the IMA
kexec kernel image signature using the pre-boot keys.  This pull
request similarly makes keys on the platform keyring accessible for
verifying the PE kernel image signature.*

Also included in this pull request is a new IMA hook that tags tmp
files, in policy, indicating the file hash needs to be calculated.
 The remaining patches are cleanup.

*Upstream commit "993a110319a4 (x86/kexec: Fix a kexec_file_load()
failure)" is required for testing.
---

2e884fc9759d8816630d3c30694721a39b7396e0