capabilities

Most active threads (last 7 days)

No active threads in the last 7 days.

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in linux-integrity touching this subsystem.

• landlock: Add READ_METADATA and WRITE_METADATA access rights v3 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 -next 06/18] LSM: pass struct path and struct file to the inode xattr hooks 2026-10-27
  2026-10-27 · Cai Xinchen <hidden>
• landlock: Add READ_METADATA and WRITE_METADATA access rights v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 -next 06/18] LSM: pass struct path to the inode xattr hooks 2026-10-15
  2026-10-15 · Cai Xinchen <hidden>
• landlock: Add READ_METADATA and WRITE_METADATA access rights rfc · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC -next 06/12] LSM: pass struct path to the inode xattr hooks 2026-09-24
  2026-09-24 · Cai Xinchen <hidden>
• fs: port to const struct mnt_idmap v1 · 2 matching patches

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 08/27] fs: port privilege checking helpers to const mnt_idmap 2026-09-01
  • [PATCH 13/27] fs: port xattr to const mnt_idmap 2026-09-01
  2026-09-01 · Christian Brauner <brauner@kernel.org>
• [PATCH] lsm: move inode IS_PRIVATE checks to individual LSMs 2026-02-20 · <hidden>
• Rework the LSM initialization v5 · 1 matching patch

  Entire posting: PENDING · 21 of 34 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-10-17
  2025-10-17 · Paul Moore <paul@paul-moore.com>
• Rework the LSM initialization v4 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-09-16
  2025-09-16 · Paul Moore <paul@paul-moore.com>
• Rework the LSM initialization v3 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-08-14
  2025-08-14 · Paul Moore <paul@paul-moore.com>
• Rework the LSM initialization v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-07-21
  2025-07-21 · Paul Moore <paul@paul-moore.com>
• Rework the LSM initialization rfc · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH 05/29] lsm: replace the name field with a pointer to the lsm_id struct 2025-04-09
  • [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs 2025-04-09
  2025-04-09 · Paul Moore <paul@paul-moore.com>
• Script execution control (was O_MAYEXEC) v23 · 1 matching patch

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v23 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits 2024-12-12
  2024-12-12 · Mickaël Salaün <mic@digikod.net>
• Script execution control (was O_MAYEXEC) v22 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v22 2/8] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits 2024-12-05
  2024-12-05 · Mickaël Salaün <mic@digikod.net>
• Script execution control (was O_MAYEXEC) v21 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v21 2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits 2024-11-12
  2024-11-12 · Mickaël Salaün <mic@digikod.net>
• Script execution control (was O_MAYEXEC) v20 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v20 2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits 2024-10-11
  2024-10-11 · Mickaël Salaün <mic@digikod.net>
• Refactor return value of two lsm hooks v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v1 1/2] lsm: Refactor return value of LSM hook vm_enough_memory 2024-07-24
  2024-07-24 · Xu Kuohai <xukuohai@huaweicloud.com>
• Add return value range check for BPF LSM v4 · 3 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH bpf-next v4 01/20] lsm: Refactor return value of LSM hook vm_enough_memory 2024-07-11
  • [PATCH bpf-next v4 02/20] lsm: Refactor return value of LSM hook inode_need_killpriv 2024-07-11
  • [PATCH bpf-next v4 03/20] lsm: Refactor return value of LSM hook inode_getsecurity 2024-07-11
  2024-07-11 · Xu Kuohai <xukuohai@huaweicloud.com>
• Script execution control (was O_MAYEXEC) v19 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v19 2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits 2024-07-04
  2024-07-04 · Mickaël Salaün <mic@digikod.net>
• fs: use type-safe uid representation for filesystem capabilities v2 · 9 matching patches

  Entire posting: PENDING · 4 of 25 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data 2024-02-21
  • [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps 2024-02-21
  • [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids 2024-02-21
  • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps 2024-02-21
  • [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace 2024-02-21
  • [PATCH v2 09/25] commoncap: use is_fscaps_xattr() 2024-02-21
  • [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs 2024-02-21
  • [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity() 2024-02-21
  • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces 2024-02-21
  2024-02-21 · Seth Forshee (DigitalOcean) <sforshee@kernel.org>
• ima: Namespace IMA with audit support in IMA-ns v15 · 1 matching patch

  Entire posting: PENDING · 17 of 26 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v15 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2023-02-06
  2023-02-06 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v14 · 1 matching patch

  Entire posting: SUPERSEDED · 1 of 26 landed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v14 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2022-09-15
  2022-09-15 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v13 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v13 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2022-07-07
  2022-07-07 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v12 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v12 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2022-04-20
  2022-04-20 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v11 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v11 12/27] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2022-03-02
  2022-03-02 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v10 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v10 12/27] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2022-02-01
  2022-02-01 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v9 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v9 12/23] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() 2022-01-25
  2022-01-25 · Stefan Berger <hidden>
• ima: Namespace IMA with audit support in IMA-ns v8 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v8 08/19] ima: Use mac_admin_ns_capable() to check corresponding capability 2022-01-04
  2022-01-04 · Stefan Berger <hidden>
• ima: Namespace IMA with audit support in IMA-ns v7 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v7 12/14] ima: Use mac_admin_ns_capable() to check corresponding capability 2021-12-16
  2021-12-16 · Stefan Berger <hidden>
• ima: Namespace IMA with audit support in IMA-ns v6 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v6 15/17] ima: Use mac_admin_ns_capable() to check corresponding capability 2021-12-10
  2021-12-10 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v5 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 14/16] ima: Use mac_admin_ns_capable() to check corresponding capability 2021-12-08
  2021-12-08 · Stefan Berger <stefanb@linux.ibm.com>
• ima: Namespace IMA with audit support in IMA-ns v4 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 14/16] ima: Use mac_admin_ns_capable() to check corresponding capability 2021-12-07
  2021-12-07 · Stefan Berger <stefanb@linux.ibm.com>