config EVM bool "EVM support" select KEYS select ENCRYPTED_KEYS select CRYPTO_HMAC select CRYPTO_SHA1 default n help EVM protects a file's security extended attributes against integrity attacks. If you are unsure how to answer this question, answer N. config EVM_ATTR_FSUUID bool "FSUUID (version 2)" default y depends on EVM help Include filesystem UUID for HMAC calculation. Default value is 'selected', which is former version 2. if 'not selected', it is former version 1 WARNING: changing the HMAC calculation method or adding additional info to the calculation, requires existing EVM labeled file systems to be relabeled. config EVM_EXTRA_SMACK_XATTRS bool "Additional SMACK xattrs" depends on EVM && SECURITY_SMACK default n help Include additional SMACK xattrs for HMAC calculation. In addition to the original security xattrs (eg. security.selinux, security.SMACK64, security.capability, and security.ima) included in the HMAC calculation, enabling this option includes newly defined Smack xattrs: security.SMACK64EXEC, security.SMACK64TRANSMUTE and security.SMACK64MMAP. WARNING: changing the HMAC calculation method or adding additional info to the calculation, requires existing EVM labeled file systems to be relabeled. config EVM_LOAD_X509 bool "Load an X509 certificate onto the '.evm' trusted keyring" depends on EVM && INTEGRITY_TRUSTED_KEYRING default n help Load an X509 certificate onto the '.evm' trusted keyring. This option enables X509 certificate loading from the kernel onto the '.evm' trusted keyring. A public key can be used to verify EVM integrity starting from the 'init' process. config EVM_X509_PATH string "EVM X509 certificate path" depends on EVM_LOAD_X509 default "/etc/keys/x509_evm.der" help This option defines X509 certificate path. 7027'>treecommit diff

path: root/net/bridge

Age	Commit message (Expand)	Author	Files	Lines
2017-02-14	bridge: fdb: converge fdb_delete_by functions into one	Nikolay Aleksandrov	1	-47/+15
2017-02-14	bridge: fdb: add proper lock checks in searching functions	Nikolay Aleksandrov	2	-0/+13
2017-02-14	bridge: fdb: converge fdb searching functions into one	Nikolay Aleksandrov	4	-70/+54
2017-02-10	switchdev: bridge: Offload mc router ports	Nogah Frankel	1	-0/+15
2017-02-10	bridge: mcast: Merge the mc router ports deletions to one function	Nogah Frankel	1	-15/+9
2017-02-10	switchdev: bridge: Offload multicast disabled	Nogah Frankel	1	-0/+16
2017-02-08	bridge: vlan tunnel id info range fill size calc cleanups	Roopa Prabhu	1	-18/+16
2017-02-07	bridge: avoid unnecessary read of jiffies	stephen hemminger	2	-4/+8
2017-02-07	bridge: remove unnecessary check for vtbegin in br_fill_vlan_tinfo_range	Roopa Prabhu	1	-1/+1
2017-02-07	bridge: tunnel: fix attribute checks in br_parse_vlan_tunnel_info	Nikolay Aleksandrov	1	-4/+4
2017-02-07	net: bridge: remove redundant check to see if err is set	Colin Ian King	1	-3/+0
2017-02-06	bridge: fdb: write to used and updated at most once per jiffy	Nikolay Aleksandrov	2	-2/+4
2017-02-06	bridge: move write-heavy fdb members in their own cache line	Nikolay Aleksandrov	1	-4/+6
2017-02-06	bridge: move to workqueue gc	Nikolay Aleksandrov	10	-23/+29
2017-02-06	bridge: modify bridge and port to have often accessed fields in one cache line	Nikolay Aleksandrov	1	-23/+20
2017-02-06	net: remove ndo_neigh_{construct, destroy} from stacked devices	Ido Schimmel	1	-2/+0
2017-02-03	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	David S. Miller	3	-32/+49
2017-02-03	bridge: vlan dst_metadata hooks in ingress and egress paths	Roopa Prabhu	6	-2/+82
2017-02-03	bridge: per vlan dst_metadata netlink support	Roopa Prabhu	7	-48/+641
2017-02-02	netfilter: allow logging from non-init namespaces	Michal Kubeček	1	-1/+1