security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• COOLING5d [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks
  2026-07-06 23:51 · 6 replies in 7d · Song Liu <song@kernel.org>
• WARM1d [PATCH 0/2] Bring includes in linux/kmod.h up to date
  2026-07-08 15:46 · 1 reply in 7d · Petr Pavlu <petr.pavlu@suse.com>
• WARM3d [PATCH v5 bpf-next 0/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-07-08 00:10 · 1 reply in 7d · David Windsor <hidden>

Active reviewers (last 30 days)

• Amir Goldstein <amir73il@gmail.com>
  12 attestations (12 Reviewed-by) · last on 2026-07-02
• Serge Hallyn <serge@hallyn.com>
  12 attestations (12 Reviewed-by) · last on 2026-07-02
• Christian Brauner <brauner@kernel.org>
  12 attestations (12 Reviewed-by) · last on 2026-07-02
• Stephen Smalley <stephen.smalley.work@gmail.com>
  2 attestations (2 Reviewed-by) · last on 2026-07-06
• Paul Moore <paul@paul-moore.com>
  1 attestation (1 Suggested-by) · last on 2026-07-08
• Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
  1 attestation (1 Acked-by) · last on 2026-07-06
• Song Liu <song@kernel.org>
  1 attestation (1 Suggested-by) · last on 2026-06-18

Recent patches

Most-recent 30 patches in this subsystem on linux-fsdevel (capped at 30), ordered by date desc.

• WARM1d [PATCH 1/2] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-08 · Petr Pavlu <petr.pavlu@suse.com>
• WARM3d [PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
  2026-07-08 · David Windsor <hidden>
• COOLING5d REVIEWED: 1 (1M) [PATCH v6 8/8] lsm: Remove security_sb_mount and security_move_mount
  2026-07-06 · Song Liu <song@kernel.org>
• COOLING5d REVIEWED: 1 (1M) [PATCH v6 6/8] tomoyo: Convert from sb_mount to granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• COOLING5d [PATCH v6 5/8] landlock: Convert from sb_mount to granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• COOLING5d [PATCH v6 3/8] apparmor: Convert from sb_mount to granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• COOLING5d [PATCH v6 2/8] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
  2026-07-06 · Song Liu <song@kernel.org>
• COOLING5d REVIEWED: 1 (1M) [PATCH v6 1/8] lsm: Add granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• COOLING8d [RFC PATCH 3/3] coredump, net: remove `SOCK_COREDUMP`
  2026-07-03 · John Ericson <hidden>
• COOLING5d REVIEWED: 13 (13M) [PATCH 6.18 002/108] lsm: add backing_file LSM hooks
  2026-07-02 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• WARM1d REVIEWED: 13 (13M) [PATCH 6.6 089/175] lsm: add backing_file LSM hooks
  2026-07-02 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• WARM1d REVIEWED: 13 (13M) [PATCH 6.12 126/204] lsm: add backing_file LSM hooks
  2026-07-02 · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COOLING10d [PATCH v4 bpf-next 2/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-30 · David Windsor <hidden>
• COOLING10d [PATCH v4 bpf-next 1/3] security: pass inode_init_security xattrs via struct lsm_xattrs
  2026-06-30 · David Windsor <hidden>
• COOLING11d REVIEWED: 13 (13M) [PATCH v3 stable/linux-6.12.y 2/3] lsm: add backing_file LSM hooks
  2026-06-29 · Cai Xinchen <hidden>
• COOLING11d [PATCH stable/linux-5.10.y 4/7] lsm: constify the 'file' parameter in security_binder_transfer_file()
  2026-06-29 · Cai Xinchen <hidden>
• COOLING11d REVIEWED: 13 (13M) [PATCH stable/linux-5.10.y 6/7] lsm: add backing_file LSM hooks
  2026-06-29 · Cai Xinchen <hidden>
• COOLING14d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.6.y 2/3] lsm: add backing_file LSM hooks
  2026-06-27 · Cai Xinchen <hidden>
• COOLING14d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.12.y 1/2] lsm: add backing_file LSM hooks
  2026-06-27 · Cai Xinchen <hidden>
• COLD15d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks
  2026-06-26 · Cai Xinchen <hidden>
• COLD15d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks
  2026-06-26 · Cai Xinchen <hidden>
• COLD20d REVIEWED: 13 (13M) [stable/linux-6.6.y 2/3] lsm: add backing_file LSM hooks
  2026-06-22 · Cai Xinchen <hidden>
• COLD16d REVIEWED: 13 (13M) [stable/linux-6.12.y 1/2] lsm: add backing_file LSM hooks
  2026-06-22 · Cai Xinchen <hidden>
• COLD16d REVIEWED: 13 (13M) [stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks
  2026-06-22 · Cai Xinchen <hidden>
• COLD16d [PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-18 · David Windsor <hidden>
• COLD22d REVIEWED: 1 (1M) [PATCH v5 8/8] lsm: Remove security_sb_mount and security_move_mount
  2026-05-28 · Song Liu <song@kernel.org>
• COLD22d REVIEWED: 1 (1M) [PATCH v5 6/8] tomoyo: Convert from sb_mount to granular mount hooks
  2026-05-28 · Song Liu <song@kernel.org>
• COLD22d [PATCH v5 5/8] landlock: Convert from sb_mount to granular mount hooks
  2026-05-28 · Song Liu <song@kernel.org>
• COLD22d [PATCH v5 3/8] apparmor: Convert from sb_mount to granular mount hooks
  2026-05-28 · Song Liu <song@kernel.org>
• COLD22d [PATCH v5 2/8] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
  2026-05-28 · Song Liu <song@kernel.org>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE116d REVIEWED: 5 (5M) [PATCH v3 1/2] EVM: add comment describing why ino field is still unsigned long
  2026-03-16 · Jeff Layton <jlayton@kernel.org> · 1 Reviewed-by
• WARM1d REVIEWED: 2 (1M) [PATCH v2 3/9] landlock: Wrap per-layer access masks in struct layer_config
  2026-05-27 · Mickaël Salaün <mic@digikod.net> · 2 Reviewed-by
• WARM1d REVIEWED: 2 (1M) [PATCH v2 4/9] landlock: Enforce namespace use restrictions
  2026-05-27 · Mickaël Salaün <mic@digikod.net> · 2 Reviewed-by
• WARM1d REVIEWED: 4 (4M) [PATCH v2 2/9] security: Add LSM_AUDIT_DATA_NS for namespace audit records
  2026-05-27 · Mickaël Salaün <mic@digikod.net> · 2 Reviewed-by
• WARM1d REVIEWED: 2 (1M) [PATCH v2 5/9] landlock: Enforce capability restrictions
  2026-05-27 · Mickaël Salaün <mic@digikod.net> · 2 Reviewed-by
• COLD16d REVIEWED: 13 (13M) [stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks
  2026-06-22 · Cai Xinchen <hidden> · 3 Reviewed-by
• COLD16d REVIEWED: 13 (13M) [stable/linux-6.12.y 1/2] lsm: add backing_file LSM hooks
  2026-06-22 · Cai Xinchen <hidden> · 3 Reviewed-by
• COLD20d REVIEWED: 13 (13M) [stable/linux-6.6.y 2/3] lsm: add backing_file LSM hooks
  2026-06-22 · Cai Xinchen <hidden> · 3 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE173d [PATCH 07/12] mm: update shmem_[kernel]_file_*() functions to use vma_flags_t
  2026-01-19 · Lorenzo Stoakes <hidden>
• STALE170d [PATCH RESEND 07/12] mm: update shmem_[kernel]_file_*() functions to use vma_flags_t
  2026-01-19 · Lorenzo Stoakes <hidden>
• STALE86d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE89d [PATCH 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
  2026-03-18 · Song Liu <song@kernel.org>
• STALE89d [PATCH 3/7] apparmor: Convert from sb_mount to granular mount hooks
  2026-03-18 · Song Liu <song@kernel.org>
• STALE89d [PATCH 5/7] landlock: Convert from sb_mount to granular mount hooks
  2026-03-18 · Song Liu <song@kernel.org>
• STALE105d [PATCH 2/5] Use icount_read() and icount_read_once() as appropriate.
  2026-03-28 · Mateusz Guzik <hidden>
• STALE105d [PATCH v2 2/5] Use icount_read() and icount_read_once() as appropriate.
  2026-03-28 · Mateusz Guzik <hidden>
• STALE102d [PATCH v3 2/7] Use icount_read() and icount_read_once() as appropriate.
  2026-03-29 · Mateusz Guzik <hidden>