| /linux/security/keys/trusted-keys/ |
| H A D | Makefile | 3 # Makefile for trusted keys
6 obj-$(CONFIG_TRUSTED_KEYS) += trusted.o
7 trusted-y += trusted_core.o
8 trusted-$(CONFIG_TRUSTED_KEYS_TPM) += trusted_tpm1.o
11 trusted-$(CONFIG_TRUSTED_KEYS_TPM) += trusted_tpm2.o
12 trusted-$(CONFIG_TRUSTED_KEYS_TPM) += tpm2key.asn1.o
14 trusted-$(CONFIG_TRUSTED_KEYS_TEE) += trusted_tee.o
16 trusted-$(CONFIG_TRUSTED_KEYS_CAAM) += trusted_caam.o
18 trusted-$(CONFIG_TRUSTED_KEYS_DCP) += trusted_dcp.o
20 trusted
[all...] |
| /linux/crypto/asymmetric_keys/ |
| H A D | restrict.c | 212 struct key *trusted, bool check_dest) in key_or_keyring_common() argument
225 if (!trusted && !check_dest) in key_or_keyring_common()
237 if (trusted) { in key_or_keyring_common()
238 if (trusted->type == &key_type_keyring) { in key_or_keyring_common()
240 key = find_asymmetric_key(trusted, sig->auth_ids[0], in key_or_keyring_common()
245 } else if (trusted->type == &key_type_asymmetric) { in key_or_keyring_common()
249 asymmetric_key_ids(trusted)->id; in key_or_keyring_common()
273 key = __key_get(trusted); in key_or_keyring_common()
280 key = __key_get(trusted); in key_or_keyring_common()
286 key = __key_get(trusted); in key_or_keyring_common()
[all …]
|
| /linux/drivers/md/ |
| H A D | dm-verity-loadpin.c | 21 bool trusted = false; in is_trusted_verity_target() local
39 trusted = true; in is_trusted_verity_target()
46 return trusted; in is_trusted_verity_target()
59 bool trusted = false; in dm_verity_loadpin_is_bdev_trusted() local
79 trusted = true; in dm_verity_loadpin_is_bdev_trusted()
85 return trusted; in dm_verity_loadpin_is_bdev_trusted()
|
| /linux/security/integrity/ima/ |
| H A D | Kconfig | 198 be signed and verified by a public key on the trusted IMA
211 and verified by a public key on the trusted IMA keyring.
223 and verified by a key on the trusted IMA keyring.
256 machine (if configured), or secondary trusted keyrings. The
262 built-in, machine (if configured) or secondary trusted keyrings.
276 bool "Load X509 certificate onto the '.ima' trusted keyring"
281 loaded on the .ima trusted keyring. These public keys are
282 X509 certificates signed by a trusted key on the
284 loading from the kernel onto the '.ima' trusted keyring.
316 trusted boo
[all...] |
| /linux/Documentation/tee/ |
| H A D | ts-tee.rst | 59 [1] https://www.trustedfirmware.org/projects/trusted-services/
67 [5] https://trusted-services.readthedocs.io/en/v1.0.0/developer/service-access-protocols.html#abi
69 [6] https://git.trustedfirmware.org/TS/trusted-services.git/tree/components/rpc/ts_rpc/caller/linux…
71 [7] https://git.trustedfirmware.org/TS/trusted-services.git/tree/deployments/libts/arm-linux/CMakeL…
|
| H A D | tee.rst | 12 A TEE is a trusted OS running in some secure environment, for example,
|
| /linux/Documentation/admin-guide/hw-vuln/ |
| H A D | core-scheduling.rst | 21 user-designated trusted group can share a core. This increase in core sharing
101 trusted (same cookie) at any point in time. Kernel threads are assumed trusted.
110 the idle task is selected. Idle task is globally trusted.
126 priority task is not trusted with respect to the core wide highest priority
127 task. If a sibling does not have a trusted task to run, it will be forced idle
157 and are considered system-wide trusted. The forced-idling of siblings running
166 Core scheduling tries to guarantee that only trusted tasks run concurrently on a
168 concurrently or kernel could be running concurrently with a task not trusted by
173 Core scheduling selects only trusted tasks to run together. IPI is used to notify
207 allowing system processes (trusted tasks) to share a core.
|
| /linux/security/integrity/evm/ |
| H A D | Kconfig | 60 bool "Load an X509 certificate onto the '.evm' trusted keyring"
64 Load an X509 certificate onto the '.evm' trusted keyring.
67 onto the '.evm' trusted keyring. A public key can be used to
|
| /linux/security/integrity/ |
| H A D | Kconfig | 53 .evm keyrings be signed by a key on the system trusted
57 bool "Provide keyring for platform/firmware trusted keys"
61 Provide a separate, distinct keyring for platform trusted keys, which
76 be trusted within the kernel.
|
| /linux/Documentation/security/keys/ |
| H A D | index.rst | 11 trusted-encrypted
|
| H A D | ecryptfs.rst | 35 time after the unsealing of a 'trusted' key in order to perform the mount in a
49 key-type:= 'trusted' | 'user'
|
| /linux/Documentation/userspace-api/ |
| H A D | check_exec.rst | 57 For such secure execution environment to make sense, only trusted code should
109 No threat, everyone and everything is trusted, but we can get ahead of
121 The threat is (potential) malicious scripts run by trusted (and not fooled)
139 The threat is malicious scripts run by untrusted users (but trusted code).
140 This makes sense for system services that may only execute trusted scripts.
|
| /linux/Documentation/filesystems/ |
| H A D | overlayfs.rst | 103 creation of trusted.* and/or user.* extended attributes, and must provide
148 as a zero-size regular file with the xattr "trusted.overlay.whiteout".
154 A directory is made opaque by setting the xattr "trusted.overlay.opaque"
160 "trusted.overlay.whiteout", should be additionally marked by setting the xattr
161 "trusted.overlay.opaque" to "x" on the merge directory itself.
162 This is needed to avoid the overhead of checking the "trusted.overlay.whiteout"
210 copied up (but not the contents). Then the "trusted.overlay.redirect"
250 upper directory is stored in a "trusted.overlay.upper" extended attribute
400 "trusted.overlayfs.metacopy" xattr which indicates that the upper file
403 the "trusted.overlayfs.metacopy" xattr is removed from the upper file.
[all …]
|
| /linux/include/linux/ |
| H A D | if_link.h | 30 __u32 trusted; member
|
| /linux/drivers/net/ethernet/intel/ice/ |
| H A D | ice_sriov.c | 1276 ivi->trusted = vf->trusted; in ice_get_vf_cfg()
1377 int ice_set_vf_trust(struct net_device *netdev, int vf_id, bool trusted) in ice_set_vf_trust() argument
1397 if (trusted == vf->trusted) { in ice_set_vf_trust()
1404 while (!trusted && vf->num_mac_lldp) in ice_set_vf_trust()
1407 vf->trusted = trusted; in ice_set_vf_trust()
1410 vf_id, trusted ? "" : "un"); in ice_set_vf_trust()
|
| H A D | ice_vf_lib.h | 170 u8 trusted:1; member
240 return vf->num_mac_lldp && vf->trusted; in ice_vf_is_lldp_ena()
|
| /linux/security/keys/ |
| H A D | Makefile | 31 obj-$(CONFIG_TRUSTED_KEYS) += trusted-keys/
|
| /linux/Documentation/ABI/testing/ |
| H A D | sysfs-class-bdi | 71 be trusted to play fair.
84 which cannot be trusted to play fair.
112 trusted to play fair, or a nbd device.
|
| /linux/drivers/net/ethernet/intel/ixgbe/ |
| H A D | ixgbe_sriov.c | 109 adapter->vfinfo[i].trusted = false; in __ixgbe_enable_sriov()
961 if (adapter->vfinfo[vf].pf_set_mac && !adapter->vfinfo[vf].trusted && in ixgbe_set_vf_mac_addr()
1002 if (adapter->vfinfo[vf].pf_set_mac && !adapter->vfinfo[vf].trusted && in ixgbe_set_vf_macvlan_msg()
1193 !adapter->vfinfo[vf].trusted) { in ixgbe_update_vf_xcast_mode()
1950 if (adapter->vfinfo[vf].trusted == setting) in ixgbe_ndo_set_vf_trust()
1953 adapter->vfinfo[vf].trusted = setting; in ixgbe_ndo_set_vf_trust()
1978 ivi->trusted = adapter->vfinfo[vf].trusted; in ixgbe_ndo_get_vf_config()
|
| /linux/Documentation/bpf/ |
| H A D | signing.rst | 17 originates from a trusted producer and was not modified in transit. On its own
21 a key in the trusted keyring", as could in the future be enforced by an LSM
55 The trusted loader
101 loader and its inputs once, and trust transfers to whatever that now-trusted,
103 signature can be checked" to "after a trusted program runs" - which is exactly
392 ``keyring_id`` selects the trusted keyring the PKCS#7 signature is verified
415 serial. The system keyrings are trusted as a whole and expose no serial
460 At runtime the trusted public key must be present in the chosen keyring (for
461 example added to the session keyring, or built into the kernel's builtin trusted
|
| /linux/drivers/net/ethernet/intel/i40e/ |
| H A D | i40e_virtchnl_pf.h | 91 bool trusted; member
|
| /linux/Documentation/crypto/ |
| H A D | asymmetric-keys.rst | 338 1) Restrict using the kernel builtin trusted keyring
343 The kernel builtin trusted keyring will be searched for the signing key.
344 If the builtin trusted keyring is not configured, all links will be
348 2) Restrict using the kernel builtin and secondary trusted keyrings
353 The kernel builtin and secondary trusted keyrings will be searched for the
354 signing key. If the secondary trusted keyring is not configured, this
|
| /linux/drivers/crypto/ccp/ |
| H A D | Kconfig | 48 enable third-party trusted applications.
|
| /linux/Documentation/security/ |
| H A D | snp-tdx-threat-model.rst | 42 trusted components.
55 a trusted intermediary between the guest VM and the underlying platform
109 trusted HW platform with all of the firmware and bootloaders included on
112 privileged enough to perform trusted actions. In addition, external
|
| /linux/Documentation/ABI/stable/ |
| H A D | sysfs-bus-usb | 128 be trusted, as the device may have a smaller config descriptor
130 can be trusted, and can be used to seek forward one (sub)
|