# git rev-parse -q --verify 6c1dd1fe5d8a1d43ed96e2e0ed44a88c73c5c039^{commit} 6c1dd1fe5d8a1d43ed96e2e0ed44a88c73c5c039 already have revision, skipping fetch # git checkout -q -f -B kisskb 6c1dd1fe5d8a1d43ed96e2e0ed44a88c73c5c039 # git clean -qxdf # < git log -1 # commit 6c1dd1fe5d8a1d43ed96e2e0ed44a88c73c5c039 # Merge: e9b4c5890858 c00f94b3a5be # Author: Linus Torvalds # Date: Tue Jan 9 13:24:06 2024 -0800 # # Merge tag 'integrity-v6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity # # Pull integrity updates from Mimi Zohar: # # - Add a new IMA/EVM maintainer and reviewer # # - Disable EVM on overlayfs # # The EVM HMAC and the original file signatures contain filesystem # specific metadata (e.g. i_ino, i_generation and s_uuid), preventing # the security.evm xattr from directly being copied up to the overlay. # Further before calculating and writing out the overlay file's EVM # HMAC, EVM must first verify the existing backing file's # 'security.evm' value. # # For now until a solution is developed, disable EVM on overlayfs. # # - One bug fix and two cleanups # # * tag 'integrity-v6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity: # overlay: disable EVM # evm: add support to disable EVM on unsupported filesystems # evm: don't copy up 'security.evm' xattr # MAINTAINERS: Add Eric Snowberg as a reviewer to IMA # MAINTAINERS: Add Roberto Sassu as co-maintainer to IMA and EVM # KEYS: encrypted: Add check for strsep # ima: Remove EXPERIMENTAL from Kconfig # ima: Reword IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY # < /opt/cross/kisskb/korg/gcc-8.5.0-nolibc/x86_64-linux/bin/x86_64-linux-gcc --version # < /opt/cross/kisskb/korg/gcc-8.5.0-nolibc/x86_64-linux/bin/x86_64-linux-ld --version # < git log --format=%s --max-count=1 6c1dd1fe5d8a1d43ed96e2e0ed44a88c73c5c039 # make -s -j 40 ARCH=x86 O=/kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/x86_64-linux/bin/x86_64-linux- x86_64_defconfig # < make -s -j 40 ARCH=x86 O=/kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/x86_64-linux/bin/x86_64-linux- help # make -s -j 40 ARCH=x86 O=/kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/x86_64-linux/bin/x86_64-linux- olddefconfig # make -s -j 40 ARCH=x86 O=/kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.5.0-nolibc/x86_64-linux/bin/x86_64-linux- Completed OK # rm -rf /kisskb/build/linus_x86_64_defconfig_x86_64-gcc8 # Build took: 0:01:32.307746