security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-block (capped at 30), ordered by date desc.

• STALE77d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE241d [PATCH 3/8] cred: make init_cred static
  2025-11-02 · Christian Brauner <brauner@kernel.org>
• STALE287d LANDED: 1 (0M) [PATCH v2 2/4] copy_process: pass clone_flags as u64 across calltree
  2025-09-01 · Simon Schuster via B4 Relay <devnull+schuster.simon.siemens-energy.com@kernel.org>
• STALE575d [PATCH 09/11] landlock: use sb_for_each_inodes API
  2024-11-18 · Ye Bin <hidden>
• STALE682d Re: [PATCH v20 02/20] ipe: add policy parser
  2024-08-14 · Fan Wu <hidden>
• STALE682d [PATCH v20 03/20] ipe: add evaluation loop
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 04/20] ipe: add LSM hooks on execution and kernel read
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 01/20] security: add ipe lsm
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 02/20] ipe: add policy parser
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 15/20] fsverity: expose verified fsverity built-in signatures to LSMs
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 18/20] ipe: kunit test for parser
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 16/20] ipe: enable support for fs-verity as a trust provider
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 17/20] scripts: add boot policy generation program
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 14/20] security: add security_inode_setintegrity() hook
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 11/20] block|lsm: Add LSM blob and new LSM hooks for block devices
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 12/20] dm verity: expose root hash digest and signature data to LSMs
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 13/20] ipe: add support for dm-verity as a trust provider
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 07/20] security: add new securityfs delete function
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 05/20] initramfs|security: Add a security hook to do_populate_rootfs()
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 06/20] ipe: introduce 'boot_verified' as a trust provider
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 08/20] ipe: add userspace interface
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 10/20] ipe: add permissive toggle
  2024-08-03 · Fan Wu <hidden>
• STALE682d [PATCH v20 09/20] uapi|audit|ipe: add ipe auditing support
  2024-08-03 · Fan Wu <hidden>
• STALE760d [PATCH v19 15/20] fsverity: expose verified fsverity built-in signatures to LSMs
  2024-05-24 · Fan Wu <hidden>
• STALE760d [PATCH v19 17/20] scripts: add boot policy generation program
  2024-05-24 · Fan Wu <hidden>
• STALE760d [PATCH v19 18/20] ipe: kunit test for parser
  2024-05-24 · Fan Wu <hidden>
• STALE760d [PATCH v19 16/20] ipe: enable support for fs-verity as a trust provider
  2024-05-24 · Fan Wu <hidden>
• STALE760d [PATCH v19 10/20] ipe: add permissive toggle
  2024-05-24 · Fan Wu <hidden>
• STALE760d [PATCH v19 14/20] security: add security_inode_setintegrity() hook
  2024-05-24 · Fan Wu <hidden>
• STALE760d [PATCH v19 12/20] dm verity: expose root hash digest and signature data to LSMs
  2024-05-24 · Fan Wu <hidden>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE77d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>