fsverity.lists.linux.dev archive mirror
 help / color / mirror / Atom feed
[PATCHBOMB v5.6] fs-verity support for XFS
 2024-05-01  7:36 UTC  (120+ messages)
` [PATCHSET v5.6 1/2] fs-verity: support merkle tree access by blocks
  ` [PATCH 01/18] fs: add FS_XFLAG_VERITY for verity files
  ` [PATCH 02/18] fsverity: pass tree_blocksize to end_enable_verity()
  ` [PATCH 03/18] fsverity: convert verification to use byte instead of page offsets
  ` [PATCH 04/18] fsverity: support block-based Merkle tree caching
  ` [PATCH 05/18] fsverity: pass the merkle tree block level to fsverity_read_merkle_tree_block
  ` [PATCH 06/18] fsverity: add per-sb workqueue for post read processing
  ` [PATCH 07/18] fsverity: add tracepoints
  ` [PATCH 08/18] fsverity: pass the new tree size and block size to ->begin_enable_verity
  ` [PATCH 09/18] fsverity: expose merkle tree geometry to callers
  ` [PATCH 10/18] fsverity: box up the write_merkle_tree_block parameters too
  ` [PATCH 11/18] fsverity: pass the zero-hash value to the implementation
  ` [PATCH 12/18] fsverity: report validation errors back to the filesystem
  ` [PATCH 13/18] fsverity: pass super_block to fsverity_enqueue_verify_work
  ` [PATCH 14/18] ext4: use a per-superblock fsverity workqueue
  ` [PATCH 15/18] f2fs: "
  ` [PATCH 16/18] btrfs: "
  ` [PATCH 17/18] fsverity: remove system-wide workqueue
  ` [PATCH 18/18] iomap: integrate fs-verity verification into iomap's read path
` [PATCHSET v5.6 2/2] xfs: fs-verity support
  ` [PATCH 01/26] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c
  ` [PATCH 02/26] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function
  ` [PATCH 03/26] xfs: create a helper to compute the blockcount of a max sized remote value
  ` [PATCH 04/26] xfs: minor cleanups of xfs_attr3_rmt_blocks
  ` [PATCH 05/26] xfs: use an empty transaction to protect xfs_attr_get from deadlocks
  ` [PATCH 06/26] xfs: add attribute type for fs-verity
  ` [PATCH 07/26] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks
  ` [PATCH 08/26] xfs: add fs-verity ro-compat flag
  ` [PATCH 09/26] xfs: add inode on-disk VERITY flag
  ` [PATCH 10/26] xfs: initialize fs-verity on file open and cleanup on inode destruction
  ` [PATCH 11/26] xfs: don't allow to enable DAX on fs-verity sealed inode
  ` [PATCH 12/26] xfs: disable direct read path for fs-verity files
  ` [PATCH 13/26] xfs: widen flags argument to the xfs_iflags_* helpers
  ` [PATCH 14/26] xfs: add fs-verity support
  ` [PATCH 15/26] xfs: create a per-mount shrinker for verity inodes merkle tree blocks
  ` [PATCH 16/26] xfs: shrink verity blob cache
  ` [PATCH 17/26] xfs: don't store trailing zeroes of merkle tree blocks
  ` [PATCH 18/26] xfs: use merkle tree offset as attr hash
  ` [PATCH 19/26] xfs: don't bother storing merkle tree blocks for zeroed data blocks
  ` [PATCH 20/26] xfs: add fs-verity ioctls
  ` [PATCH 21/26] xfs: advertise fs-verity being available on filesystem
  ` [PATCH 22/26] xfs: check and repair the verity inode flag state
  ` [PATCH 23/26] xfs: teach online repair to evaluate fsverity xattrs
  ` [PATCH 24/26] xfs: report verity failures through the health system
  ` [PATCH 25/26] xfs: make it possible to disable fsverity
  ` [PATCH 26/26] xfs: enable ro-compat fs-verity flag
` [PATCHSET v5.6] xfsprogs: fs-verity support for XFS
  ` [PATCH 01/38] fs: add FS_XFLAG_VERITY for verity files
  ` [PATCH 02/38] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c
  ` [PATCH 03/38] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function
  ` [PATCH 04/38] xfs: create a helper to compute the blockcount of a max sized remote value
  ` [PATCH 05/38] xfs: minor cleanups of xfs_attr3_rmt_blocks
  ` [PATCH 06/38] xfs: use an empty transaction to protect xfs_attr_get from deadlocks
  ` [PATCH 07/38] xfs: add attribute type for fs-verity
  ` [PATCH 08/38] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks
  ` [PATCH 09/38] xfs: add fs-verity ro-compat flag
  ` [PATCH 10/38] xfs: add inode on-disk VERITY flag
  ` [PATCH 11/38] xfs: add fs-verity support
  ` [PATCH 12/38] xfs: use merkle tree offset as attr hash
  ` [PATCH 13/38] xfs: advertise fs-verity being available on filesystem
  ` [PATCH 14/38] xfs: report verity failures through the health system
  ` [PATCH 15/38] xfs: enable ro-compat fs-verity flag
  ` [PATCH 16/38] libfrog: add fsverity to xfs_report_geom output
  ` [PATCH 17/38] xfs_db: introduce attr_modify command
  ` [PATCH 18/38] xfs_db: add ATTR_PARENT support to "
  ` [PATCH 19/38] xfs_db: make attr_set/remove/modify be able to handle fs-verity attrs
  ` [PATCH 20/38] man: document attr_modify command
  ` [PATCH 21/38] xfs_db: create hex string as a field type
  ` [PATCH 22/38] xfs_db: dump verity features and metadata
  ` [PATCH 23/38] xfs_db: dump merkle tree data
  ` [PATCH 24/38] xfs_db: dump the verity descriptor
  ` [PATCH 25/38] xfs_db: don't obfuscate verity xattrs
  ` [PATCH 26/38] xfs_db: dump the inode verity flag
  ` [PATCH 27/38] xfs_db: compute hashes of merkle tree blocks
  ` [PATCH 28/38] xfs_repair: junk fsverity xattrs when unnecessary
  ` [PATCH 29/38] xfs_repair: clear verity iflag when verity isn't supported
  ` [PATCH 30/38] xfs_repair: handle verity remote attrs
  ` [PATCH 31/38] xfs_repair: allow upgrading filesystems with verity
  ` [PATCH 32/38] xfs_scrub: check verity file metadata
  ` [PATCH 33/38] xfs_scrub: validate verity file contents when doing a media scan
  ` [PATCH 34/38] xfs_scrub: use MADV_POPULATE_READ to check verity files
  ` [PATCH 35/38] xfs_spaceman: report data corruption
  ` [PATCH 36/38] xfs_io: report fsverity status via statx
  ` [PATCH 37/38] xfs_io: create magic command to disable verity
  ` [PATCH 38/38] mkfs.xfs: add verity parameter
` [PATCHSET v5.6] fstests: fs-verity support for XFS
  ` [PATCH 1/6] common/verity: enable fsverity "
  ` [PATCH 2/6] xfs/{021,122}: adapt to fsverity xattrs
  ` [PATCH 3/6] xfs/122: adapt to fsverity
  ` [PATCH 4/6] xfs: test xfs_scrub detection and correction of corrupt fsverity metadata
  ` [PATCH 5/6] xfs: test disabling fsverity
  ` [PATCH 6/6] common/populate: add verity files to populate xfs images

[bug report] kmemleak observed after system boots up
 2024-05-01  2:53 UTC  (3+ messages)
  ` [PATCH] fsverity: use register_sysctl_init() to avoid kmemleak warning

[PATCHSET v5.5 1/2] fs-verity: support merkle tree access by blocks
 2024-04-29 16:35 UTC  (44+ messages)
` [PATCH 03/13] fsverity: support block-based Merkle tree caching
` [PATCH 04/13] fsverity: add per-sb workqueue for post read processing
` [PATCH 06/13] fsverity: send the level of the merkle tree block to ->read_merkle_tree_block
` [PATCH 07/13] fsverity: pass the new tree size and block size to ->begin_enable_verity
` [PATCH 08/13] fsverity: expose merkle tree geometry to callers
` [PATCH 09/13] fsverity: box up the write_merkle_tree_block parameters too
` [PATCH 10/13] fsverity: pass the zero-hash value to the implementation
` [PATCH 11/13] fsverity: report validation errors back to the filesystem
` [PATCH 12/13] fsverity: remove system-wide workqueue

[RFC PATCH 0/8] Optimize dm-verity and fsverity using multibuffer hashing
 2024-04-26  8:56 UTC  (12+ messages)
` [RFC PATCH 1/8] crypto: shash - add support for finup2x
` [RFC PATCH 2/8] crypto: testmgr - generate power-of-2 lengths more often
` [RFC PATCH 3/8] crypto: testmgr - add tests for finup2x
` [RFC PATCH 4/8] crypto: x86/sha256-ni - add support "
` [RFC PATCH 5/8] crypto: arm64/sha256-ce "
` [RFC PATCH 6/8] fsverity: improve performance by using multibuffer hashing
` [RFC PATCH 7/8] dm-verity: hash blocks with shash import+finup when possible
` [RFC PATCH 8/8] dm-verity: improve performance by using multibuffer hashing

[PATCH v17 00/21] Integrity Policy Enforcement LSM (IPE)
 2024-04-25 20:23 UTC  (26+ messages)
` [PATCH v17 06/21] ipe: introduce 'boot_verified' as a trust provider
` [PATCH v17 08/21] ipe: add userspace interface
` [PATCH v17 09/21] uapi|audit|ipe: add ipe auditing support
` [PATCH v17 10/21] ipe: add permissive toggle
` [PATCH v17 11/21] block,lsm: add LSM blob and new LSM hooks for block device
` [PATCH v17 12/21] dm: add finalize hook to target_type
` [PATCH v17 13/21] dm verity: consume root hash digest and expose signature data via LSM hook
` [PATCH v17 14/21] ipe: add support for dm-verity as a trust provider
` [PATCH v17 15/21] security: add security_inode_setintegrity() hook
` [PATCH v17 16/21] fsverity: expose verified fsverity built-in signatures to LSMs
` [PATCH v17 17/21] ipe: enable support for fs-verity as a trust provider
` [PATCH v17 18/21] scripts: add boot policy generation program
` [PATCH v17 19/21] ipe: kunit test for parser
` [PATCH v17 20/21] Documentation: add ipe documentation
` [PATCH v17 21/21] MAINTAINERS: ipe: add ipe maintainer information

[PATCHSET v5.5 2/2] xfs: fs-verity support
 2024-04-25  1:14 UTC  (8+ messages)
` [PATCH 13/29] xfs: add "
` [PATCH 14/29] xfs: create a per-mount shrinker for verity inodes merkle tree blocks

[PATCH v2] fuse: Add initial support for fs-verity
 2024-04-23 18:41 UTC  (5+ messages)

[PATCH v2 0/8] Optimize dm-verity and fsverity using multibuffer hashing
 2024-04-22 20:35 UTC  (9+ messages)
` [PATCH v2 1/8] crypto: shash - add support for finup2x
` [PATCH v2 2/8] crypto: testmgr - generate power-of-2 lengths more often
` [PATCH v2 3/8] crypto: testmgr - add tests for finup2x
` [PATCH v2 4/8] crypto: x86/sha256-ni - add support "
` [PATCH v2 5/8] crypto: arm64/sha256-ce "
` [PATCH v2 6/8] fsverity: improve performance by using multibuffer hashing
` [PATCH v2 7/8] dm-verity: hash blocks with shash import+finup when possible
` [PATCH v2 8/8] dm-verity: improve performance by using multibuffer hashing


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).