security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-arm-kernel (capped at 30), ordered by date desc.

• WARM3d [PATCH RFC v8 24/24] mm: Add basic tests for kpkeys_hardened_pgtables
  2026-05-26 · Kevin Brodsky <hidden>
• WARM3d [PATCH RFC v8 11/24] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature
  2026-05-26 · Kevin Brodsky <hidden>
• COLD50d Re: [PATCH] ima: debugging late_initcall_sync measurements
  2026-05-06 · Yeoreum Yun <hidden>
• COLD58d [PATCH RFC v7 24/24] mm: Add basic tests for kpkeys_hardened_pgtables
  2026-05-05 · Kevin Brodsky <hidden>
• COLD58d [PATCH RFC v7 11/24] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature
  2026-05-05 · Kevin Brodsky <hidden>
• COLD56d [RFC PATCH 3/3] security: integrity: call load_uefi_certs() at late_initcall_sync
  2026-05-05 · Yeoreum Yun <hidden>
• COLD50d [PATCH] ima: debugging late_initcall_sync measurements
  2026-04-29 · Mimi Zohar <zohar@linux.ibm.com>
• COLD50d [RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM
  2026-04-24 · Jonathan McDowell <hidden>
• COLD50d [RFC PATCH v3 1/4] lsm: Allow LSMs to register for late_initcall_sync init
  2026-04-24 · Jonathan McDowell <hidden>
• STALE65d Re: [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM
  2026-04-23 · Jonathan McDowell <hidden>
• STALE65d Re: [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM
  2026-04-23 · Yeoreum Yun <hidden>
• STALE65d [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM
  2026-04-22 · Yeoreum Yun <hidden>
• STALE71d [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync
  2026-04-17 · Yeoreum Yun <hidden>
• STALE101d LANDED [PATCH 03/12] crypto: sm3 - Rename CRYPTO_SM3_GENERIC to CRYPTO_SM3
  2026-03-21 · Eric Biggers <ebiggers@kernel.org>
• COLD59d [PATCH v6 30/30] mm: Add basic tests for kpkeys_hardened_pgtables
  2026-02-27 · Kevin Brodsky <hidden>
• COLD59d [PATCH v6 13/30] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature
  2026-02-27 · Kevin Brodsky <hidden>
• STALE127d Re: [PATCH 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-01-19 · Coiby Xu <hidden>
• STALE127d [PATCH 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-01-15 · Coiby Xu <hidden>
• STALE218d [RFC PATCH v2 8/8] mm: Add basic tests for kpkeys_hardened_cred
  2025-08-15 · Kevin Brodsky <hidden>
• STALE218d [RFC PATCH v2 6/8] cred: Protect live struct cred with kpkeys
  2025-08-15 · Kevin Brodsky <hidden>
• STALE214d [RFC PATCH v5 17/18] mm: Add basic tests for kpkeys_hardened_pgtables
  2025-08-15 · Kevin Brodsky <hidden>
• STALE214d [RFC PATCH v5 11/18] mm: Introduce kpkeys_hardened_pgtables
  2025-08-15 · Kevin Brodsky <hidden>
• STALE327d [PATCH v3 11/13] kstack_erase: Support Clang stack depth tracking
  2025-07-17 · Kees Cook <kees@kernel.org>
• STALE327d LANDED [PATCH v3 02/13] stackleak: Rename stackleak_track_stack to __sanitizer_cov_stack_depth
  2025-07-17 · Kees Cook <kees@kernel.org>
• STALE327d LANDED [PATCH v3 01/13] stackleak: Rename STACKLEAK to KSTACK_ERASE
  2025-07-17 · Kees Cook <kees@kernel.org>
• STALE350d [PATCH 24/26] KEYS: trusted_tpm1: Use SHA-1 library instead of crypto_shash
  2025-07-12 · Eric Biggers <ebiggers@kernel.org>
• STALE359d [PATCH v2 12/14] kstack_erase: Support Clang stack depth tracking
  2025-05-23 · Kees Cook <kees@kernel.org>
• STALE359d [PATCH v2 02/14] stackleak: Rename stackleak_track_stack to __sanitizer_cov_stack_depth
  2025-05-23 · Kees Cook <kees@kernel.org>
• STALE359d [PATCH v2 01/14] stackleak: Rename STACKLEAK to KSTACK_ERASE
  2025-05-23 · Kees Cook <kees@kernel.org>
• STALE416d [PATCH 6/8] stackleak: Support Clang stack depth tracking
  2025-05-07 · Kees Cook <kees@kernel.org>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COLD59d [PATCH v6 13/30] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature
  2026-02-27 · Kevin Brodsky <hidden>
• COLD59d [PATCH v6 30/30] mm: Add basic tests for kpkeys_hardened_pgtables
  2026-02-27 · Kevin Brodsky <hidden>
• STALE101d LANDED [PATCH 03/12] crypto: sm3 - Rename CRYPTO_SM3_GENERIC to CRYPTO_SM3
  2026-03-21 · Eric Biggers <ebiggers@kernel.org>
• COLD50d [RFC PATCH v3 1/4] lsm: Allow LSMs to register for late_initcall_sync init
  2026-04-24 · Jonathan McDowell <hidden>
• COLD56d [RFC PATCH 3/3] security: integrity: call load_uefi_certs() at late_initcall_sync
  2026-05-05 · Yeoreum Yun <hidden>
• COLD58d [PATCH RFC v7 11/24] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature
  2026-05-05 · Kevin Brodsky <hidden>
• COLD58d [PATCH RFC v7 24/24] mm: Add basic tests for kpkeys_hardened_pgtables
  2026-05-05 · Kevin Brodsky <hidden>
• WARM3d [PATCH RFC v8 11/24] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature
  2026-05-26 · Kevin Brodsky <hidden>
• WARM3d [PATCH RFC v8 24/24] mm: Add basic tests for kpkeys_hardened_pgtables
  2026-05-26 · Kevin Brodsky <hidden>