security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-api (capped at 30), ordered by date desc.

• COLD27d [PATCH v3 2/7] treewide: Get rid of get_task_comm()
  2026-06-12 · André Almeida <andrealmeid@igalia.com>
• COLD41d [PATCH v2 2/6] treewide: Get rid of get_task_comm()
  2026-05-24 · André Almeida <andrealmeid@igalia.com>
• COLD50d [PATCH 2/6] treewide: Get rid of get_task_comm()
  2026-05-17 · André Almeida <andrealmeid@igalia.com>
• STALE247d [PATCH v6 3/5] AppArmor: add support for lsm_config_self_policy and lsm_config_system_policy
  2025-10-10 · Maxime Bélair <hidden>
• STALE247d [PATCH v6 2/5] lsm: introduce security_lsm_config_*_policy hooks
  2025-10-10 · Maxime Bélair <hidden>
• STALE247d [PATCH v6 1/5] Wire up lsm_config_self_policy and lsm_config_system_policy syscalls
  2025-10-10 · Maxime Bélair <hidden>
• STALE247d [PATCH v6 5/5] Smack: add support for lsm_config_self_policy and lsm_config_system_policy
  2025-10-10 · Maxime Bélair <hidden>
• STALE272d [PATCH v5 2/3] lsm: introduce security_lsm_config_*_policy hooks
  2025-07-09 · Maxime Bélair <hidden>
• STALE272d [PATCH v5 3/3] AppArmor: add support for lsm_config_self_policy and lsm_config_system_policy
  2025-07-09 · Maxime Bélair <hidden>
• STALE272d [PATCH v5 1/3] Wire up lsm_config_self_policy and lsm_config_system_policy syscalls
  2025-07-09 · Maxime Bélair <hidden>
• STALE373d [PATCH v4 2/3] lsm: introduce security_lsm_config_*_policy hooks
  2025-07-01 · Maxime Bélair <hidden>
• STALE373d [PATCH v4 3/3] AppArmor: add support for lsm_config_self_policy and lsm_config_system_policy
  2025-07-01 · Maxime Bélair <hidden>
• STALE373d [PATCH v4 1/3] Wire up lsm_config_self_policy and lsm_config_system_policy syscalls
  2025-07-01 · Maxime Bélair <hidden>
• STALE275d LANDED: 5 (5M) [PATCH v6 2/6] lsm: introduce new hooks for setting/getting inode fsxattr
  2025-06-30 · Andrey Albershteyn <hidden>
• STALE373d [PATCH v3 3/3] AppArmor: add support for lsm_config_self_policy and lsm_config_system_policy
  2025-06-24 · Maxime Bélair <hidden>
• STALE373d [PATCH v3 2/3] lsm: introduce security_lsm_config_*_policy hooks
  2025-06-24 · Maxime Bélair <hidden>
• STALE373d [PATCH v3 1/3] Wire up lsm_config_self_policy and lsm_config_system_policy syscalls
  2025-06-24 · Maxime Bélair <hidden>
• STALE384d [PATCH v2 3/3] AppArmor: add support for lsm_config_self_policy and lsm_config_system_policy
  2025-06-19 · Maxime Bélair <hidden>
• STALE384d [PATCH v2 1/3] Wire up lsm_config_self_policy and lsm_config_system_policy syscalls
  2025-06-19 · Maxime Bélair <hidden>
• STALE384d [PATCH v2 2/3] lsm: introduce security_lsm_config_*_policy hooks
  2025-06-19 · Maxime Bélair <hidden>
• STALE413d [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr
  2025-05-13 · Andrey Albershteyn <hidden>
• STALE420d [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr
  2025-05-12 · Andrey Albershteyn <hidden>
• STALE422d [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr
  2025-05-12 · Andrey Albershteyn <hidden>
• STALE418d [PATCH 2/3] lsm: introduce security_lsm_manage_policy hook
  2025-05-06 · Maxime Bélair <hidden>
• STALE418d [PATCH 1/3] Wire up the lsm_manage_policy syscall
  2025-05-06 · Maxime Bélair <hidden>
• STALE418d [PATCH 3/3] AppArmor: add support for lsm_manage_policy
  2025-05-06 · Maxime Bélair <hidden>
• STALE437d [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr
  2025-03-21 · Andrey Albershteyn <hidden>
• STALE540d LANDED: 2 (2M) [PATCH v23 8/8] ima: instantiate the bprm_creds_for_exec() hook
  2024-12-12 · Mickaël Salaün <mic@digikod.net>
• STALE540d LANDED: 4 (2M) [PATCH v23 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-12-12 · Mickaël Salaün <mic@digikod.net>
• STALE540d LANDED: 9 (7M) [PATCH v23 1/8] exec: Add a new AT_EXECVE_CHECK flag to execveat(2)
  2024-12-12 · Mickaël Salaün <mic@digikod.net>