security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-cifs (capped at 30), ordered by date desc.

• COLD44d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE75d Re: [PATCH v3 00/12] vfs: change inode->i_ino from unsigned long to u64
  2026-03-09 · Jeff Layton <jlayton@kernel.org>
• STALE75d [PATCH v3 12/12] treewide: change inode->i_ino from unsigned long to u64
  2026-03-04 · Jeff Layton <jlayton@kernel.org>
• STALE87d [PATCH v2 105/110] security: replace PRIino with %llu/%llx format strings
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE87d [PATCH v2 049/110] security: use PRIino format for i_ino
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE92d [PATCH 51/61] security: update audit format strings for u64 i_ino
  2026-02-26 · Jeff Layton <jlayton@kernel.org>
• STALE138d REVIEWED: 11 (11M) [PATCH v6 08/15] VFS: introduce start_removing_dentry()
  2025-11-13 · NeilBrown <hidden>
• STALE199d REVIEWED: 7 (7M) [PATCH v5 07/14] VFS: introduce start_removing_dentry()
  2025-11-06 · NeilBrown <hidden>
• STALE206d REVIEWED: 7 (7M) [PATCH v4 07/14] VFS: introduce start_removing_dentry()
  2025-10-29 · NeilBrown <hidden>
• STALE459d REVIEWED: 4 (4M) [PATCH 1/6] Change inode_operations.mkdir to return struct dentry *
  2025-02-20 · NeilBrown <hidden>
• STALE499d [PATCH] net: Convert proto_ops::getname to sockaddr_storage
  2024-12-17 · Kees Cook <kees@kernel.org>
• STALE787d [RESEND][PATCH v3] security: Place security_path_post_mknod() where the original IMA call was
  2024-04-03 · Roberto Sassu <hidden>
• STALE787d [PATCH v3] security: Place security_path_post_mknod() where the original IMA call was
  2024-04-03 · Roberto Sassu <hidden>
• DORMANTno replies REVIEWED: 10 (10M) [PATCH v2] security: Handle dentries without inode in security_path_post_mknod()
  2024-04-02 · Roberto Sassu <hidden>
• STALE792d [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()
  2024-03-29 · Roberto Sassu <hidden>
• STALE792d [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod()
  2024-03-29 · Roberto Sassu <hidden>
• STALE793d Re: kernel crash in mknod
  2024-03-28 · Christian Brauner <brauner@kernel.org>
• STALE802d [PATCH] keys: Fix overwrite of key expiration on instantiation
  2024-03-15 · Silvio Gissi <hidden>
• STALE873d REVIEWED: 1 (0M) [PATCH 5.10 19/75] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2024-01-03 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE876d REVIEWED: 1 (0M) [PATCH 5.15 21/95] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2024-01-03 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE880d REVIEWED: 1 (0M) [PATCH 6.1 038/112] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2023-12-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE876d REVIEWED: 1 (0M) [PATCH 6.6 067/156] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2023-12-30 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE889d REVIEWED: 1 (0M) [PATCH v4 3/3] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2023-12-21 · David Howells <dhowells@redhat.com>
• STALE892d [PATCH v3 3/3] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2023-12-12 · David Howells <dhowells@redhat.com>
• DORMANTno replies [PATCH v2 3/3] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2023-12-11 · David Howells <dhowells@redhat.com>
• STALE900d [PATCH 3/3] keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
  2023-12-11 · David Howells <dhowells@redhat.com>
• STALE1005d [PATCH v2 7/8] apparmor: update ctime whenever the mtime changes on an inode
  2023-06-12 · Jeff Layton <jlayton@kernel.org>
• STALE1060d [PATCH 8/9] apparmor: update ctime whenever the mtime changes on an inode
  2023-06-09 · Jeff Layton <jlayton@kernel.org>
• STALE1095d [PATCH -next 2/2] lsm: Change inode_setattr hook to take struct path argument
  2023-05-05 · Xiu Jianfeng <xiujianfeng@huawei.com>
• STALE1142d REVIEWED: 5 (5M) [PATCH 5.10 041/173] keys: Do not cache key in task struct if key is requested from kernel thread
  2023-04-03 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COLD44d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>