Changes in Kconfig

0b9828c7231e2e46b25d286da555510a79c0d6fa - Merge tag 'v7.3-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-current

Mon, 21 Sep 2026 10:36:20 +0200

Merge tag 'v7.3-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-currentLinux 7.3-rc4 List of files: /linux/security/integrity/ima/Kconfig

546b928da0427b0d6c663cbb992bd7bfa9ac7971 - Merge tag 'asoc-fix-v7.3-rc3' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

Thu, 17 Sep 2026 08:15:32 +0200

Merge tag 'asoc-fix-v7.3-rc3' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linusASoC: Fixes for v7.3A relatively large pile of fixes here, a lot of driver specific stuffthat's broadly unremarkable plus a few core fixes from Richard that fixissues where SoundWire systems with multiple CODECs on the same linkwould configure the CODECs to use the same bus slots leading to brokenaudio. List of files: /linux/security/integrity/ima/Kconfig

a8916759a451918c2a95633390d3428640858087 - Merge drm/drm-fixes into drm-misc-fixes

Tue, 08 Sep 2026 13:32:08 +0200

Merge drm/drm-fixes into drm-misc-fixesBackmerging to get drm-misc-fixes up to v7.3-rc2.Signed-off-by: Thomas Zimmermann List of files: /linux/security/integrity/ima/Kconfig

4d7d9486c04d917265f64c55bd23b2cc4fe7749c - Merge tag 'integrity-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

Sat, 05 Sep 2026 04:36:11 +0200

Merge tag 'integrity-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityPull IMA fixes from Mimi Zohar: - Instantiating the ima_file_truncate and ima_path_truncate LSM hooks resulted in configfs locking issues. configfs files should not be measured, appraised, or audited in the first place, so the builtin policies are updated to exclude them. - IMA audit messages include the filename, which could result in a page fault when the filename doesn't exist - Un-hide the IMA_MEASURE_PCR_IDX Kconfig prompt* tag 'integrity-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity: ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() ima: don't measure/appraise files on configfs configfs: move CONFIGFS_MAGIC definition to magic.h List of files: /linux/security/integrity/ima/Kconfig

6903878d4654bdef4e08e38cdf1ae306ce7de5f9 - ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX

Fri, 04 Sep 2026 13:09:11 +0200

ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDXThe IMA_MEASURE_PCR_IDX option is currently not visible in the kconfigfrontend, so it always uses its default, 10. This means that the'range 8 14' is dead code, and users are unable to specify the pcr indexvalue.In a previous discussion, Mimi explained that users should be able to usethis config option to specify the pcr index. [1]Let's add a prompt for users to specify the pcr index, when EXPERT isenabled.This dead range was found by kconfirm, a static analysis tool for Kconfig.Link: https://lore.kernel.org/all/1feff118-4afa-4b9c-86f1-271a7a88208f@gmail.com/T/#mc4efa2491b4937eb7c9e532c29ffba516a70e662 [1]Signed-off-by: Julian Braha Signed-off-by: Mimi Zohar List of files: /linux/security/integrity/ima/Kconfig

67f8bc848ee31831336bd478e57d2f993551902e - Merge drm/drm-fixes into drm-misc-fixes

Tue, 01 Sep 2026 09:38:51 +0200

Merge drm/drm-fixes into drm-misc-fixesLet's start the 7.3 drm-misc-fixes cycle.Signed-off-by: Maxime Ripard List of files: /linux/security/integrity/ima/Kconfig

b2128290c29902315e632ea59e0504d6bc9e9b42 - Merge remote-tracking branch 'drm/drm-next' into msm-next-backmerge

Sat, 18 Jul 2026 17:06:55 +0200

Merge remote-tracking branch 'drm/drm-next' into msm-next-backmergeBackmerge of drm-next, mainly to pick up dt bindings docs updates toavoid conflicts.Signed-off-by: Rob Clark List of files: /linux/security/integrity/ima/Kconfig

637315cb400eed1dbe721954fea437a61a2d65b2 - Merge tag 'kvm-riscv-7.3-1' of https://github.com/kvm-riscv/linux into HEAD

Tue, 18 Aug 2026 13:07:31 +0200

Merge tag 'kvm-riscv-7.3-1' of https://github.com/kvm-riscv/linux into HEADKVM/riscv changes for 7.3- Svadu/Zicfiss/Zicfilp FWFT support for Guest- Use try_cmpxchg for IMSIC MRIF RMW- More arch-specific tracepoints in KVM RISC-V- Eager Page Splitting for KVM RISC-V- Optimize hfence request handling for SMP Guests- Improve dirty log clearing by skipping zero bits in mask- Guard HFENCE range loops against overflow- CPU PM notifiers in KVM RISC-V for non-retentive idle states- Fix kernel-mode vector context save/restore for Guest List of files: /linux/security/integrity/ima/Kconfig

efe86f088f48f18c27b648e5724048947f3b7fb4 - Merge drm/drm-next into drm-xe-next

Tue, 14 Jul 2026 15:40:31 +0200

Merge drm/drm-next into drm-xe-nextSync some i915/display changesSigned-off-by: Rodrigo Vivi List of files: /linux/security/integrity/ima/Kconfig

6d177908bad5992e17669030db41caab88041d5e - Merge drm/drm-next into drm-intel-next

Tue, 30 Jun 2026 14:55:43 +0200

Merge drm/drm-next into drm-intel-nextSync with v7.2-rc1.Signed-off-by: Jani Nikula List of files: /linux/security/integrity/ima/Kconfig

827b9aabd3ea3e96d5e48abed9f44dbd1e550d4e - Merge drm/drm-next into drm-misc-next

Tue, 30 Jun 2026 10:16:00 +0200

Merge drm/drm-next into drm-misc-nextBackmerging to get drm-misc-next to v7.2-rc1.Signed-off-by: Thomas Zimmermann List of files: /linux/security/integrity/ima/Kconfig

7dd19adaaac9a161723a24de7c270861063ec6ac - Merge tag 'v7.2-rc1' into drm-rust-next

Sun, 28 Jun 2026 22:39:43 +0200

Merge tag 'v7.2-rc1' into drm-rust-nextMerge v7.2-rc1 into drm-rust-next to start the next cycle.Devres now requires T: 'static, which conflicts with shmem::Object usingDevres> without that bound. Resolve by adding 'staticas a supertrait to DriverObject and DeviceContext, which does notrestrict any current use cases since DriverObject is always implementedon owned, refcounted types and DeviceContext is a sealed marker traitwith only unit-type implementors.If DriverObject (or DeviceContext) ever becomes lifetime-parameterized(e.g. via a GAT for TTM backed objects), the 'static supertrait can berelaxed at that point.Signed-off-by: Danilo Krummrich List of files: /linux/security/integrity/ima/Kconfig

a51ec5e8e5dae80824239f0344210060cb92a4b0 - Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

Thu, 20 Aug 2026 02:17:17 +0200

Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityPull integrity updates from Mimi Zohar: - TPM initialization is sometimes delayed until deferred_probe_initcall Since ordering is not guaranteed within the same initcall level, IMA may initialize before the TPM and fall back to TPM-bypass mode. A new config option, CONFIG_IMA_INIT_LATE_SYNC, allows those building the kernel to defer IMA initialization to late_initcall_sync, accepting the integrity risk of missing early measurements in exchange for avoiding TPM-bypass mode. - The raw policy rules are now measured, as well as the complete policy, closing a gap in integrity measurement coverage* tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity: ima: measure userspace policy writes before parsing ima: add critical data measurement for loaded policy security: ima: rename boot_aggregate when ima is initialised at late_sync security: ima: introduce IMA_INIT_LATE_SYNC option security: lsm: allow LSMs to register for late_initcall_sync init List of files: /linux/security/integrity/ima/Kconfig

3d5e48944e824bddc20d7b874e784f7b279636fe - Merge branch 'for-7.3/steam' into for-linus

Wed, 19 Aug 2026 09:16:28 +0200

Merge branch 'for-7.3/steam' into for-linus- initial support for 2026 Steam Controller (Vicki Pfau)- support for sensor events on the 2025 Steam Controller (Vicki Pfau)- assorted fixes, improvements and code refactoring (Vicki Pfau) List of files: /linux/security/integrity/ima/Kconfig

0eaed89c18aeedf0898baf2dbf5ff027c6795152 - Merge tag 'timers-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource

Mon, 17 Aug 2026 10:29:52 +0200

Merge tag 'timers-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/daniel.lezcano/linux into timers/clocksource - Use designated initializers for sh_mtu2, sh_cmt, and sh_tmu, and drop the unused initializer in the platform_device_id table for sh_mtu2 (Uwe Kleine-König) - Remove redundant dev_err()/dev_err_probe() messages when devm_request_*_irq() fails, as the helper already logs an error message (Pan Chuang) - Fix a boot hang on Allwinner D1 when a forced minimum delta is used with the sun4i timer (Felix Yan) - Fix an IRQ leak in the cpuhp_setup_state() error path by freeing the IRQ on failure in the NXP PIT driver (WenTao Liang) - Fix incorrect unmapping of shared MMIO between the clocksource and clockevent drivers. If one of them fails to initialize, the error path unmaps the shared MMIO region, leaving the other driver with an invalid mapping on clps711x (Guangshuo Li) - Make the samsung_pwm driver compatible with PREEMPT_RT by replacing regular spinlocks with raw_spinlock_t in atomic contexts (Marek Szyprowski) - Use __raw_readl() and __raw_writel() instead of ioread32() and iowrite32() to support SWAP_IO_SPACE in the rtl-otto driver (Rustam Adilov) - Fix a missing clk_disable_unprepare() call in the timer initialization error path of the Armada driver (Yuho Choi)Link: https://lore.kernel.org/lkml/75feea31-683d-45a1-87f4-ab045e0152ae@oss.qualcomm.com List of files: /linux/security/integrity/ima/Kconfig

b4d85f863e5a6f1fa01b186001af0f68f4f5239e - Merge branch 'next' into for-linus

Sat, 15 Aug 2026 06:26:07 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.3 merge window. List of files: /linux/security/integrity/ima/Kconfig

1ebe7997b53b7ff956a089593723d8cb6faffdd6 - security: ima: introduce IMA_INIT_LATE_SYNC option

Fri, 05 Jun 2026 16:43:23 +0200

security: ima: introduce IMA_INIT_LATE_SYNC optionTo generate the boot_aggregate log in the IMA subsystem withTPM PCR values, the TPM driver must be built as built-in andmust be probed before the IMA subsystem is initialized.However, when the TPM device operates over the FF-A protocol usingthe CRB interface, probing fails and returns -EPROBE_DEFER ifthe tpm_crb_ffa device — an FF-A device that provides the communicationinterface to the tpm_crb driver — has not yet been probed.To ensure the TPM device operating over the FF-A protocol withthe CRB interface is probed before IMA initialization,the following conditions must be met:1. The corresponding ffa_device must be registered, which is done via ffa_init().2. The tpm_crb_driver must successfully probe this device via tpm_crb_ffa_init().3. The tpm_crb driver using CRB over FF-A can then be probed successfully. (See crb_acpi_add() and tpm_crb_ffa_init() for reference.)Unfortunately, ffa_init(), tpm_crb_ffa_init(), and crb_acpi_driver_init()are all registered with device_initcall, which meanscrb_acpi_driver_init() may be invoked before ffa_init() andtpm_crb_ffa_init() are completed.When this occurs, probing the TPM device is deferred.However, the deferred probe can happen after the IMA subsystemhas already been initialized, since IMA initialization is performedduring late_initcall, and deferred_probe_initcall() is performedat the same level.And the similar situation is reported on TPM devices attached on SPIbus[0].To resolve this, introduce IMA_INIT_LATE_SYNC option to initialiseIMA at late_inicall_sync so that IMA is initialized with the TPMdevice probed deferred.When this option is enabled, modules that access files in theinitramfs through usermode helper calls such as request_module()during initcall must not be built-in. Otherwise, IMA may missmeasuring those files [1].Link: https://lore.kernel.org/all/aYXEepLhUouN5f99@earth.li/ [0]Link: https://lore.kernel.org/all/2b3782398cc17ce9d355490a0c42ebce9120a9ae.camel@linux.ibm.com/ [1]Suggested-by: Mimi Zohar Signed-off-by: Yeoreum Yun [zohar@linux.ibm.com: Fixed Kconfig merge conflict]Signed-off-by: Mimi Zohar List of files: /linux/security/integrity/ima/Kconfig

76904fccf81936c084faebc73ac72c0919a42941 - Merge tag 'v7.2-rc3' into next

Tue, 14 Jul 2026 04:06:00 +0200

Merge tag 'v7.2-rc3' into nextSync up with mainline to pull in stable fixes to avoid merge conflicts. List of files: /linux/security/integrity/ima/Kconfig

00599d4841790d05401820a96cf7edb193888b00 - Merge drm/drm-fixes into drm-misc-fixes

Mon, 29 Jun 2026 17:58:00 +0200

Merge drm/drm-fixes into drm-misc-fixesPull in tag v7.2-rc1 so that drm-misc-fixes becomes useful again,and drm-misc-next-fixes can be closed.Signed-off-by: Maarten Lankhorst List of files: /linux/security/integrity/ima/Kconfig

7a0e692a0381254b2f77c54dec100cd3325a6fdf - Merge branch 'next' into for-linus

Tue, 23 Jun 2026 08:10:08 +0200

Merge branch 'next' into for-linusPrepare input updates for 7.2 merge window. List of files: /linux/security/integrity/ima/Kconfig