{"push_id":2402785848,"size":8,"distinct_size":2,"ref":"refs/heads/network-next","head":"2b553ce562c04644053c7fb86f858d330c480bdb","before":"02f83c95934125ead958a3927bc931f020694dd6","commits":[{"sha":"fdd10261a15ecad05c60f2e898de216c2d80fecb","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"security/ima: Rewrite tests into new API + fixes\n\n* simplify code, remove duplicity\n\n* ima_measurements.sh:\n  - add support for \"ima-ng\" and \"ima-sig\" IMA measurement templates\n  - add support for most of hash algorithms is defined in\n    include/uapi/linux/hash_info.h (kernel headers); algorithms are\n    detected from last occurance of tested file in\n    /sys/kernel/security/ima/ascii_runtime_measurements\n  - check i_version mount option only for ext[2-4] filesystems (other\n    filesystems don't report it), TCONF when not mounted with it\n  - XFS has iversion support from >= V5, TCONF when older version\n  - chown only UID (GID of nobody is different on some OS, so it's\n    better not to set it as it's not necessary for the test)\n\n* ima_policy.sh:\n  - break tests instead of print TINFO when kernel is not configured to\n    enable multiple writes to the IMA policy (IMA_WRITE_POLICY)\n  - add warning when policy has been updated that reboot is needed\n\n* ima_violations.sh:\n  - change check to measure occurrence of messages in log (previous way\n    to grep tail of the log was buggy) + add sleep when SUT uses\n    /var/log/messages to prevent failure during validate\n\n* ima_tpm.sh\n  - change TCONF to TINFO in test1 (code behind that was never run)\n  - make variables local\n\n* runtest file\n  - rename the test ids to match the shell script names (more descriptive)\n    and remove duplicate whitespace\n  - change TCONF to TINFO in test2 when TPM not enabled\n\nSigned-off-by: Petr Vorel <pvorel@suse.cz>","distinct":false,"url":"https://api.github.com/repos/pevik/ltp/commits/fdd10261a15ecad05c60f2e898de216c2d80fecb"},{"sha":"93ee1e5f23bc74a1aac9ba6f0b3f912cafb086fb","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"security/ima: Run measurements after policy\n\nThis fixes failing policy tests when no IMA is configured on SUT.\n\nSigned-off-by: Petr Vorel <pvorel@suse.cz>","distinct":false,"url":"https://api.github.com/repos/pevik/ltp/commits/93ee1e5f23bc74a1aac9ba6f0b3f912cafb086fb"},{"sha":"d3e1e3d684f04adb0a01733289a8b5262e95a915","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"ima/ima_boot_aggregate: Increase MAX_EVENT_SIZE to 8k\n\nThis is needed as according IMA developers there are BIOS events larger\nthan 4k [1]. Actual size for TPM 1.2 is undefined, TPM 2.0 specifies:\n\"For software parsing the event log, the parser can choose an arbitrary\nmaximum size, but this specification recommends a maximum value for the\nTCG_PCR_EVENT2.eventSize field of 1MB.\" [2].\n\nSo hope 8k is enough.\n\n[1] http://lists.linux.it/pipermail/ltp/2018-January/006970.html\n[2] http://lists.linux.it/pipermail/ltp/2018-January/007002.html\n\nSigned-off-by: Petr Vorel <pvorel@suse.cz>","distinct":false,"url":"https://api.github.com/repos/pevik/ltp/commits/d3e1e3d684f04adb0a01733289a8b5262e95a915"},{"sha":"4320ee62d32548641867803dc7f120d2e261de27","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"ima/tpm: Various fixes\n\ntest1\n* Fix reading boot_aggregate for ima-ng\n\ntest2\n* Fix pcrs paths\n* Drop ima_measure binary, use upstream tool evmctl from ima-evm-utils instead\nhttps://git.code.sf.net/p/linux-ima/ima-evm-utils\n\ntest3\n* Dropped, as evmctl has no 'ima_measure --validate` equivalent\n\nSigned-off-by: Petr Vorel <pvorel@suse.cz>","distinct":false,"url":"https://api.github.com/repos/pevik/ltp/commits/4320ee62d32548641867803dc7f120d2e261de27"},{"sha":"922ef0b10ce1c9e1c7b8cca008ea45a2a51c2af3","author":{"name":"Alexey Kodanev","email":"9f3808f0a12da1be5378a18211ea35dc74f98ef4@oracle.com"},"message":"cve: new regression test-case for CVE-2018-5803\n\nThere are two test-cases in runtest/cve:\n* cve-2018-5803 - for over-sized INIT_ACK packet\n* cve-2018-5803_2 - for over-sized INIT packet\n\nSigned-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>","distinct":false,"url":"https://api.github.com/repos/pevik/ltp/commits/922ef0b10ce1c9e1c7b8cca008ea45a2a51c2af3"},{"sha":"63a563d063bf8eaf4185f0da35eaa04585d91ffb","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"tst_test.sh: Add default trap to INT\n\nThis can be overwritten in tests.\n\nSigned-off-by: Petr Vorel <pvorel@suse.cz>","distinct":false,"url":"https://api.github.com/repos/pevik/ltp/commits/63a563d063bf8eaf4185f0da35eaa04585d91ffb"},{"sha":"5002cb6f5c8e2a1c02a7518b3fb91007dab53f31","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"Merge branch 'ima/devel' into network-next","distinct":true,"url":"https://api.github.com/repos/pevik/ltp/commits/5002cb6f5c8e2a1c02a7518b3fb91007dab53f31"},{"sha":"2b553ce562c04644053c7fb86f858d330c480bdb","author":{"name":"Petr Vorel","email":"37233a827dba58e050b9cf4da3b3da17bbbdee52@suse.cz"},"message":"Merge branch 'ipsec-trap.v2-tst_check_cmds' into network-next","distinct":true,"url":"https://api.github.com/repos/pevik/ltp/commits/2b553ce562c04644053c7fb86f858d330c480bdb"}]}
{"actor":{"display_login":"pevik"}}