capabilities · Supported

Maintainers

• M Serge Hallyn <serge@hallyn.com>

Paths

• F include/linux/capability.h
• F include/trace/events/capability.h
• F include/uapi/linux/capability.h
• F kernel/capability.c
• F security/commoncap.c
• F security/commoncap_test.c

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-fsdevel (capped at 30), ordered by date desc.

• COOLING10d [PATCH 13/27] fs: port xattr to const mnt_idmap
  2026-09-01 · Christian Brauner <brauner@kernel.org>
• COOLING10d [PATCH 08/27] fs: port privilege checking helpers to const mnt_idmap
  2026-09-01 · Christian Brauner <brauner@kernel.org>
• COLD20d [PATCH v4] security: Expand task_setscheduler LSM hook
  2026-07-20 · Aaron Tomlin <atomlin@atomlin.com>
• STALE73d REVIEWED: 5 (5M) [PATCH v3 5/5] capability: unexport has_capability_noaudit
  2026-07-02 · cem@kernel.org
• STALE73d REVIEWED: 6 (6M) [PATCH v3 2/5] capability: Add new capable_noaudit
  2026-07-02 · cem@kernel.org
• COLD56d [RFC PATCH 4/4] capability: unexport has_capability_noaudit
  2026-06-26 · cem@kernel.org
• COLD56d [RFC PATCH 1/4] capabily: Add new capable_noaudit
  2026-06-26 · cem@kernel.org
• STALE93d [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-26 · Aaron Tomlin <atomlin@atomlin.com>
• STALE125d [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• STALE129d [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE273d [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-18 · Bernd Edlinger <hidden>
• STALE421d [PATCH v5 3/3] treewide: Switch from tsk->comm to tsk->comm_str which is 64 bytes long
  2025-07-16 · Bhupesh <hidden>
• STALE611d LANDED: 4 (2M) [PATCH v23 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-12-12 · Mickaël Salaün <mic@digikod.net>
• STALE647d REVIEWED: 2 (2M) [PATCH v22 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-12-05 · Mickaël Salaün <mic@digikod.net>
• STALE653d REVIEWED: 2 (2M) [PATCH v21 2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-11-12 · Mickaël Salaün <mic@digikod.net>
• STALE704d [PATCH v20 2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits
  2024-10-11 · Mickaël Salaün <mic@digikod.net>
• STALE770d [RFC PATCH v19 2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits
  2024-07-04 · Mickaël Salaün <mic@digikod.net>
• STALE812d [PATCH v2 3/4] capabilities: Add sysctl to mask off userns caps
  2024-06-09 · Jonathan Calmels <hidden>
• STALE812d [PATCH v2 1/4] capabilities: Add user namespace capabilities
  2024-06-09 · Jonathan Calmels <hidden>
• STALE840d [PATCH 1/3] capabilities: user namespace capabilities
  2024-05-16 · Jonathan Calmels <hidden>
• STALE926d [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d REVIEWED: 5 (5M) [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity()
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d REVIEWED: 5 (5M) [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d [PATCH v2 09/25] commoncap: use is_fscaps_xattr()
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d REVIEWED: 8 (8M) [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE926d [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data
  2024-02-21 · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>