mirror of
https://git.code.sf.net/p/linux-ima/ima-evm-utils
synced 2025-04-28 06:33:36 +02:00
93 lines
2.7 KiB
Plaintext
93 lines
2.7 KiB
Plaintext
2018-01-28 Mimi Zohar <zohar@us.ibm.com>
|
|
|
|
version 1.1
|
|
* Support the new openssl 1.1 api
|
|
* Support for validating multiple pcrs
|
|
* Verify the measurement list signature based on the list digest
|
|
* Verify the "ima-sig" measurement list using multiple keys
|
|
* Fixed parsing the measurement template data field length
|
|
* Portable & immutable EVM signatures (new format)
|
|
* Multiple fixes that have been lingering in the next branch. Some
|
|
are for experimental features that are not yet supported in the
|
|
kernel.
|
|
|
|
2014-07-30 Dmitry Kasatkin <dmitry.kasatkin@huawei.com>
|
|
|
|
version 1.0
|
|
* Recursive hashing
|
|
* Immutable EVM signatures (experimental)
|
|
* Command 'ima_clear' to remove xattrs
|
|
* Support for passing password to the library
|
|
* Support for asking password safely from the user
|
|
|
|
2014-09-23 Dmitry Kasatkin <d.kasatkin@samsung.com>
|
|
|
|
version 0.9
|
|
* Updated README
|
|
* man page generated and added to the package
|
|
* Use additional SMACK xattrs for EVM signature generation
|
|
* Signing functions moved to libimaevm for external use (RPM)
|
|
* Fixed setting of correct hash header
|
|
|
|
2014-05-05 Dmitry Kasatkin <d.kasatkin@samsung.com>
|
|
|
|
version 0.8
|
|
* Symbilic names for keyrings
|
|
* Hash list signing
|
|
* License text fix for using OpenSSL
|
|
* Help output fix
|
|
|
|
2014-02-17 Dmitry Kasatkin <d.kasatkin@samsung.com>
|
|
|
|
version 0.7
|
|
* Fix symbolic links related bugs
|
|
* Provide recursive fixing
|
|
* Provide recursive signing
|
|
* Move IMA verification to the library (first for LTP use)
|
|
* Support for target architecture data size
|
|
* Remove obsolete module signing code
|
|
* Code cleanup
|
|
|
|
2013-08-28 Dmitry Kasatkin <d.kasatkin@samsung.com>
|
|
|
|
version 0.6
|
|
* support for asymmetric crypto keys and new signature format (v2)
|
|
* fixes to set correct hash algo for digital signature v1
|
|
* uuid support for EVM
|
|
* signature verification support
|
|
* test scripts removed
|
|
* README updates
|
|
|
|
2012-05-18 Dmitry Kasatkin <dmitry.kasatkin@intel.com>
|
|
|
|
version 0.3
|
|
* llistxattr returns 0 if there are no xattrs and it is valid
|
|
* Added entry type to directory hash calculation
|
|
* inline block variable renamed
|
|
* Remove forced tag creation
|
|
* Use libexec for programs and scripts
|
|
* Some files updated
|
|
* Do not search for algorithm as it is known
|
|
* Refactored to remove redundant hash initialization code
|
|
* Added hash calculation for special files
|
|
|
|
2012-04-05 Dmitry Kasatkin <dmitry.kasatkin@intel.com>
|
|
|
|
version 0.2
|
|
* added RPM & TAR building makefile rules
|
|
* renamed evm-utils to ima-evm-utils
|
|
* added command options description
|
|
* updated error handling
|
|
* refactored redundant code
|
|
|
|
2012-04-02 Dmitry Kasatkin <dmitry.kasatkin@intel.com>
|
|
|
|
version 0.1.0
|
|
* Fully functional version for lastest 3.x kernels
|
|
|
|
2011-08-24 Dmitry Kasatkin <dmitry.kasatkin@intel.com>
|
|
|
|
version 0.1
|
|
* Initial public version.
|
|
|