← All active subsystems in linux-api

capabilities · Supported

Maintainers

• M Serge Hallyn <serge@hallyn.com>

Paths

• F include/linux/capability.h
• F include/trace/events/capability.h
• F include/uapi/linux/capability.h
• F kernel/capability.c
• F security/commoncap.c
• F security/commoncap_test.c

Last 30 days

Most active threads (last 7 days)

• WARM2d [PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
  2026-10-28 22:18 · 1 reply in 7d · Hallgrimur H. Gunnarsson <hidden>

Recent patches

Most-recent 30 patches in this subsystem on linux-api (capped at 30), ordered by date desc.

• WARM2d [PATCH 2/8] userns: introduce capability bounding set for user namespaces
  2026-10-28 · Hallgrimur H. Gunnarsson <hidden>
• STALE654d LANDED: 3 (1M) [PATCH v23 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-12-12 · Mickaël Salaün <mic@digikod.net>
• STALE689d SUPERSEDED: 1 (1M) [PATCH v22 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-12-05 · Mickaël Salaün <mic@digikod.net>
• STALE695d SUPERSEDED: 1 (1M) [PATCH v21 2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-11-12 · Mickaël Salaün <mic@digikod.net>
• STALE746d SUPERSEDED [PATCH v20 2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-10-11 · Mickaël Salaün <mic@digikod.net>
• STALE812d SUPERSEDED [RFC PATCH v19 2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits
  2024-07-04 · Mickaël Salaün <mic@digikod.net>
• STALE962d REVIEWED: 4 (3M) [PATCH v15 01/11] LSM: Identify modules by more than name
  2023-09-12 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1145d SUPERSEDED: 4 (3M) [PATCH v14 01/11] LSM: Identify modules by more than name
  2023-08-28 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1162d SUPERSEDED: 3 (2M) [PATCH v13 01/11] LSM: Identify modules by more than name
  2023-08-02 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1188d SUPERSEDED: 2 (1M) [PATCH v12 01/11] LSM: Identify modules by more than name
  2023-06-29 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1223d SUPERSEDED: 2 (1M) [PATCH v11 01/11] LSM: Identify modules by more than name
  2023-06-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1234d SUPERSEDED: 1 (0M) [PATCH v10 01/11] LSM: Identify modules by more than name
  2023-04-28 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1281d SUPERSEDED: 1 (0M) [PATCH v10 01/11] LSM: Identify modules by more than name
  2023-04-28 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1282d SUPERSEDED [PATCH v9 01/11] LSM: Identify modules by more than name
  2023-04-21 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1290d SUPERSEDED [PATCH v8 01/11] LSM: Identify modules by more than name
  2023-04-11 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1297d SUPERSEDED [PATCH v7 01/11] LSM: Identify modules by more than name
  2023-03-15 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1303d SUPERSEDED [PATCH v6 01/11] LSM: Identify modules by more than name
  2023-02-22 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1354d SUPERSEDED [PATCH v5 1/8] LSM: Identify modules by more than name
  2023-01-09 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1397d SUPERSEDED [PATCH v4 1/8] LSM: Identify modules by more than name
  2022-12-29 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1427d SUPERSEDED [PATCH v3 1/9] LSM: Identify modules by more than name
  2022-11-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1437d [PATCH v1 1/8] LSM: Identify modules by more than name
  2022-11-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1437d [PATCH v1 2/8] LSM: Add an LSM identifier for external use
  2022-11-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1450d [PATCH v1 2/8] LSM: Add an LSM identifier for external use
  2022-10-25 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1450d [PATCH v1 1/8] LSM: Identify modules by more than name
  2022-10-25 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1949d [CFT][PATCH] exit/bdflush: Remove the deprecated bdflush system call
  2021-06-29 · Eric W. Biederman <hidden>
• STALE2058d LANDED: 1 (1M) [PATCH v6 09/40] xattr: handle idmapped mounts
  2021-01-21 · Christian Brauner <hidden>
• STALE2058d LANDED: 2 (2M) [PATCH v6 04/40] capability: handle idmapped mounts
  2021-01-21 · Christian Brauner <hidden>
• STALE2058d LANDED: 1 (1M) [PATCH v6 08/40] acl: handle idmapped mounts
  2021-01-21 · Christian Brauner <hidden>
• STALE2058d LANDED: 1 (1M) [PATCH v6 10/40] commoncap: handle idmapped mounts
  2021-01-21 · Christian Brauner <hidden>
• STALE2110d SUPERSEDED [PATCH v5 16/42] xattr: handle idmapped mounts
  2021-01-12 · Christian Brauner <hidden>