security subsystem

Most active threads (last 7 days)

No active threads in the last 7 days.

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in linux-arch touching this subsystem.

• UUID and GUID user and group ids (*_r system calls) v2 · 3 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID 2026-10-21
  • [RFC PATCH v2 12/41] keys: name per-user keyrings of UUID and GUID users by the whole uid 2026-10-21
  • [RFC PATCH v2 27/41] audit: log UUID and GUID ids in full 2026-10-21
  2026-10-21 · Jan Koester <hidden>
• UUID and GUID user and group ids (*_r system calls) rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID 2026-10-18
  2026-10-18 · Jan Koester <hidden>
• CRASH_MEMACTION: describe pages to a kdump kernel (was: CRASH_WIPE_SECRETS) v3 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 07/12] security/keys: Allocate key payloads from the secret pool 2026-09-28
  2026-09-28 · Jan Sebastian Götte <hidden>
• Convert moduleparams to seq_buf v1 · 3 matching patches

  Entire posting: PENDING · 1 of 11 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS 2026-05-21
  • [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf 2026-05-21
  • [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci 2026-05-21
  2026-05-21 · Kees Cook <kees@kernel.org>
• module: Introduce hash-based integrity checking v5 · 3 matching patches

  Entire posting: PENDING · 4 of 14 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency 2026-05-05
  • [PATCH v5 09/14] module: Move signature type check out of mod_check_sig() 2026-05-05
  • [PATCH v5 12/14] module: Introduce hash-based integrity checking 2026-05-05
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• [PATCH] integrity: avoid using __weak functions 2026-03-06 · Arnd Bergmann <arnd@kernel.org>
• module: Introduce hash-based integrity checking v4 · 5 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 03/17] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG 2026-01-13
  • [PATCH v4 08/17] module: Deduplicate signature extraction 2026-01-13
  • [PATCH v4 13/17] module: Report signature type to users 2026-01-13
  • [PATCH v4 14/17] lockdown: Make the relationship to MODULE_SIG a dependency 2026-01-13
  • [PATCH v4 15/17] module: Introduce hash-based integrity checking 2026-01-13
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• fs: introduce file_getattr and file_setattr syscalls v5 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr 2025-05-12
  2025-05-13 · Andrey Albershteyn <hidden>
• module: Introduce hash-based integrity checking v3 · 3 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 2/9] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG 2025-04-29
  • [PATCH v3 8/9] lockdown: Make the relationship to MODULE_SIG a dependency 2025-04-29
  • [PATCH v3 9/9] module: Introduce hash-based integrity checking 2025-04-29
  2025-04-29 · Thomas Weißschuh <linux@weissschuh.net>
• fs: introduce getfsxattrat and setfsxattrat syscalls v4 · 1 matching patch

  Entire posting: PENDING · 1 of 3 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr 2025-03-21
  2025-03-21 · Andrey Albershteyn <hidden>
• module: Introduce hash-based integrity checking v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 5/6] lockdown: Make the relationship to MODULE_SIG a dependency 2025-01-20
  • [PATCH v2 6/6] module: Introduce hash-based integrity checking 2025-01-20
  2025-01-20 · Thomas Weißschuh <linux@weissschuh.net>
• Update LLVM Phabricator and Bugzilla links v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 3/3] treewide: Update LLVM Bugzilla links 2024-01-09
  2024-01-09 · Nathan Chancellor <nathan@kernel.org>
• arch/x86: Remove unnecessary dependencies on bootparam.h v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 2/3] arch/x86: Add <asm/ima-efi.h> for arch_ima_efi_boot_mode 2023-12-15
  2023-12-15 · Thomas Zimmermann <tzimmermann@suse.de>
• arch/x86: Remove unnecessary dependencies on bootparam.h v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/3] arch/x86: Add <asm/ima-efi.h> for arch_ima_efi_boot_mode 2023-12-06
  2023-12-06 · Thomas Zimmermann <tzimmermann@suse.de>
• Begin reorganizing the arch documentation rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/2] docs: move x86 documentation into Documentation/arch/ 2023-03-15
  2023-03-15 · Jonathan Corbet <corbet@lwn.net>
• Fix confusion around MAX_ORDER v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 10/10] mm, treewide: Redefine MAX_ORDER sanely 2023-03-15
  2023-03-15 · Kirill A. Shutemov <hidden>
• Add KernelMemorySanitizer infrastructure v7 · 1 matching patch

  Entire posting: PENDING · 11 of 43 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v7 30/43] security: kmsan: fix interoperability with auto-initialization 2022-09-15
  2022-09-15 · Alexander Potapenko <glider@google.com>
• Add KernelMemorySanitizer infrastructure v6 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v6 31/44] security: kmsan: fix interoperability with auto-initialization 2022-09-05
  2022-09-05 · Alexander Potapenko <glider@google.com>
• Add KernelMemorySanitizer infrastructure v5 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 31/44] security: kmsan: fix interoperability with auto-initialization 2022-08-26
  2022-08-26 · Alexander Potapenko <glider@google.com>
• Add KernelMemorySanitizer infrastructure v4 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 31/45] security: kmsan: fix interoperability with auto-initialization 2022-07-01
  2022-07-01 · Alexander Potapenko <glider@google.com>
• Add KernelMemorySanitizer infrastructure v3 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 35/46] security: kmsan: fix interoperability with auto-initialization 2022-04-26
  2022-04-26 · Alexander Potapenko <glider@google.com>
• Add KernelMemorySanitizer infrastructure v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 37/48] security: kmsan: fix interoperability with auto-initialization 2022-03-29
  2022-03-29 · Alexander Potapenko <glider@google.com>
• Add KernelMemorySanitizer infrastructure v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 41/43] security: kmsan: fix interoperability with auto-initialization 2021-12-14
  2021-12-14 · Alexander Potapenko <glider@google.com>
• Fork brute force attack mitigation v8 · 6 matching patches

  Entire posting: PENDING · 1 of 8 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v8 1/8] security: Add LSM hook at the point where a task gets a fatal signal 2021-06-05
  • [PATCH v8 2/8] security/brute: Define a LSM and add sysctl attributes 2021-06-05
  • [PATCH v8 3/8] security/brute: Detect a brute force attack 2021-06-05
  • [PATCH v8 4/8] security/brute: Mitigate a brute force attack 2021-06-05
  • [PATCH v8 5/8] security/brute: Notify to userspace "task killed" 2021-06-05
  • [PATCH v8 7/8] Documentation: Add documentation for the Brute LSM 2021-06-05
  2021-06-05 · John Wood <hidden>
• Unify asm/unaligned.h around struct helper v2 · 1 matching patch

  Entire posting: PENDING · 4 of 13 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 09/13] apparmor: use get_unaligned() only for multi-byte words 2021-05-14
  2021-05-14 · Arnd Bergmann <arnd@kernel.org>
• Unify asm/unaligned.h around struct helper rfc · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC 09/12] apparmor: use get_unaligned() only for multi-byte words 2021-05-07
  2021-05-07 · Arnd Bergmann <arnd@kernel.org>
• Landlock LSM v34 · 9 matching patches

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v34 01/13] landlock: Add object management 2021-04-22
  • [PATCH v34 02/13] landlock: Add ruleset and domain management 2021-04-22
  • [PATCH v34 03/13] landlock: Set up the security framework and manage credentials 2021-04-22
  • [PATCH v34 04/13] landlock: Add ptrace restrictions 2021-04-22
  • [PATCH v34 05/13] LSM: Infrastructure management of the superblock 2021-04-22
  • [PATCH v34 06/13] fs,security: Add sb_delete hook 2021-04-22
  • [PATCH v34 07/13] landlock: Support filesystem access-control 2021-04-22
  • [PATCH v34 08/13] landlock: Add syscall implementations 2021-04-22
  • [PATCH v34 13/13] landlock: Enable user space to infer supported features 2021-04-22
  2021-04-22 · Mickaël Salaün <mic@digikod.net>
• Landlock LSM v33 · 8 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v33 01/12] landlock: Add object management 2021-04-07
  • [PATCH v33 02/12] landlock: Add ruleset and domain management 2021-04-07
  • [PATCH v33 03/12] landlock: Set up the security framework and manage credentials 2021-04-07
  • [PATCH v33 04/12] landlock: Add ptrace restrictions 2021-04-07
  • [PATCH v33 05/12] LSM: Infrastructure management of the superblock 2021-04-07
  • [PATCH v33 06/12] fs,security: Add sb_delete hook 2021-04-07
  • [PATCH v33 07/12] landlock: Support filesystem access-control 2021-04-07
  • [PATCH v33 08/12] landlock: Add syscall implementations 2021-04-07
  2021-04-07 · Mickaël Salaün <mic@digikod.net>
• Landlock LSM v32 · 8 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v32 01/12] landlock: Add object management 2021-04-01
  • [PATCH v32 02/12] landlock: Add ruleset and domain management 2021-04-01
  • [PATCH v32 03/12] landlock: Set up the security framework and manage credentials 2021-04-01
  • [PATCH v32 04/12] landlock: Add ptrace restrictions 2021-04-01
  • [PATCH v32 05/12] LSM: Infrastructure management of the superblock 2021-04-01
  • [PATCH v32 06/12] fs,security: Add sb_delete hook 2021-04-01
  • [PATCH v32 07/12] landlock: Support filesystem access-control 2021-04-01
  • [PATCH v32 08/12] landlock: Add syscall implementations 2021-04-01
  2021-04-01 · Mickaël Salaün <mic@digikod.net>
• Landlock LSM v31 · 8 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v31 01/12] landlock: Add object management 2021-03-24
  • [PATCH v31 02/12] landlock: Add ruleset and domain management 2021-03-24
  • [PATCH v31 03/12] landlock: Set up the security framework and manage credentials 2021-03-24
  • [PATCH v31 04/12] landlock: Add ptrace restrictions 2021-03-24
  • [PATCH v31 05/12] LSM: Infrastructure management of the superblock 2021-03-24
  • [PATCH v31 06/12] fs,security: Add sb_delete hook 2021-03-24
  • [PATCH v31 07/12] landlock: Support filesystem access-control 2021-03-24
  • [PATCH v31 08/12] landlock: Add syscall implementations 2021-03-24
  2021-03-24 · Mickaël Salaün <mic@digikod.net>