capabilities

Most active threads (last 7 days)

No active threads in the last 7 days.

Recent patches

Latest 20 postings or standalone patches, newest first. Counts below cover matching patches in linux-doc touching this subsystem.

• userns: per-namespace capability bounding set and opt-in netns loopback v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/8] userns: introduce capability bounding set for user namespaces 2026-10-28
  2026-10-28 · Hallgrimur H. Gunnarsson <hidden>
• landlock: Add READ_METADATA and WRITE_METADATA access rights v3 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 -next 06/18] LSM: pass struct path and struct file to the inode xattr hooks 2026-10-27
  2026-10-27 · Cai Xinchen <hidden>
• landlock: Add READ_METADATA and WRITE_METADATA access rights v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 -next 06/18] LSM: pass struct path to the inode xattr hooks 2026-10-15
  2026-10-15 · Cai Xinchen <hidden>
• landlock: Add READ_METADATA and WRITE_METADATA access rights rfc · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC -next 06/12] LSM: pass struct path to the inode xattr hooks 2026-09-24
  2026-09-24 · Cai Xinchen <hidden>
• reboot: support runtime configuration of emergency hw_protection action v3 · 1 matching patch

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 07/12] reboot: add support for configuring emergency hardware protection action 2025-02-17
  2025-02-17 · Ahmad Fatoum <a.fatoum@pengutronix.de>
• reboot: support runtime configuration of emergency hw_protection action v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 07/12] reboot: add support for configuring emergency hardware protection action 2025-01-13
  2025-01-13 · Ahmad Fatoum <a.fatoum@pengutronix.de>
• reboot: support runtime configuration of emergency hw_protection action v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 06/11] reboot: add support for configuring emergency hardware protection action 2024-12-19
  2024-12-19 · Ahmad Fatoum <a.fatoum@pengutronix.de>
• Introduce user namespace capabilities v2 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 1/4] capabilities: Add user namespace capabilities 2024-06-09
  • [PATCH v2 3/4] capabilities: Add sysctl to mask off userns caps 2024-06-09
  2024-06-09 · Jonathan Calmels <hidden>
• [PATCH bpf-next 1/2] bpf: Introduce bpf_probe_write_user_registered() 2024-04-04 · Marco Elver <elver@google.com>
• fs: use type-safe uid representation for filesystem capabilities v2 · 9 matching patches

  Entire posting: PENDING · 4 of 25 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data 2024-02-21
  • [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps 2024-02-21
  • [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids 2024-02-21
  • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps 2024-02-21
  • [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace 2024-02-21
  • [PATCH v2 09/25] commoncap: use is_fscaps_xattr() 2024-02-21
  • [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs 2024-02-21
  • [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity() 2024-02-21
  • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces 2024-02-21
  2024-02-21 · Seth Forshee (DigitalOcean) <sforshee@kernel.org>
• REVIEWED · 2 reviews, 1 by a maintainer [PATCH v3] cred: Propagate security_prepare_creds() error code 2022-06-08 · Frederick Lawler <hidden>
• [PATCH v2] cred: Propagate security_prepare_creds() error code 2022-05-25 · Frederick Lawler <hidden>
• REVIEWED · 5 reviews, 2 by maintainers [PATCH 05/60] capabilities: Introduce CAP_PERFMON to kernel and user space 2020-04-20 · Arnaldo Carvalho de Melo <acme@kernel.org>
• REVIEWED · 5 reviews, 0 by maintainers [PATCH 05/26] capabilities: Introduce CAP_PERFMON to kernel and user space 2020-04-13 · Arnaldo Carvalho de Melo <acme@kernel.org>
• Introduce CAP_PERFMON to secure system performance monitoring and observability v8 · 1 matching patch

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v8 01/12] capabilities: introduce CAP_PERFMON to kernel and user space 2020-04-02
  2020-04-02 · Alexey Budankov <hidden>
• Introduce CAP_PERFMON to secure system performance monitoring and observability v7 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v7 01/12] capabilities: introduce CAP_PERFMON to kernel and user space 2020-02-17
  2020-02-17 · Alexey Budankov <hidden>
• LSM: Explict ordering v5 · 1 matching patch

  Entire posting: PENDING · 22 of 30 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH security-next v5 30/30] capability: Initialize as LSM_ORDER_FIRST 2018-10-11
  2018-10-11 · Kees Cook <hidden>
• LSM: Explict LSM ordering v4 · 1 matching patch

  Entire posting: PENDING · 29 of 32 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH security-next v4 30/32] capability: Initialize as LSM_ORDER_FIRST 2018-10-02
  2018-10-02 · Kees Cook <hidden>
• LSM: Explict LSM ordering v3 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH security-next v3 27/29] capability: Initialize as LSM_ORDER_FIRST 2018-09-25
  2018-09-25 · Kees Cook <hidden>
• LSM: Explict LSM ordering v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH security-next v2 24/26] capability: Mark as LSM_ORDER_FIRST 2018-09-20
  2018-09-20 · Kees Cook <hidden>