security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH] KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type
  2026-07-18 20:30 · 0 replies in 7d · Fabrice Derepas <hidden>
• DORMANTno replies [PATCH] ima: Report errno for failed hash collection to audit
  2026-07-16 19:11 · 0 replies in 7d · Frederick Lawler <hidden>
• WARM2d [PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-14 09:19 · 0 replies in 7d · Gaosheng Cui <hidden>
• COOLING5d [PATCH v6 0/2] ima: measure write on securityfs policy file
  2026-07-13 08:27 · 2 replies in 7d · Enrico Bravi <hidden>
• COOLING5d [PATCH -next] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-13 11:12 · 0 replies in 7d · Gaosheng Cui <hidden>

Active reviewers (last 30 days)

• Roberto Sassu <roberto.sassu@huawei.com>
  3 attestations (1 Reported-by, 2 Suggested-by) · last on 2026-07-13
• Stefan Berger <stefanb@linux.ibm.com>
  1 attestation (1 Reviewed-by) · last on 2026-07-11
• Srish Srinivasan <ssrish@linux.ibm.com>
  1 attestation (1 Tested-by) · last on 2026-07-11
• Jonathan McDowell <hidden>
  1 attestation (1 Reviewed-by) · last on 2026-07-11
• Daniel P. Smith <hidden>
  1 attestation (1 Co-developed-by) · last on 2026-07-11
• Alec Brown <hidden>
  1 attestation (1 Co-developed-by) · last on 2026-07-11
• Paul Moore <paul@paul-moore.com>
  1 attestation (1 Suggested-by) · last on 2026-07-08

Recent patches

Most-recent 30 patches in this subsystem on linux-integrity (capped at 30), ordered by date desc.

• HOTtoday [PATCH] KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type
  2026-07-18 · Fabrice Derepas <hidden>
• DORMANTno replies [PATCH] ima: Report errno for failed hash collection to audit
  2026-07-16 · Frederick Lawler <hidden>
• WARM2d [PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-14 · Gaosheng Cui <hidden>
• COOLING5d [PATCH -next] ima: add cond_resched() in ima_calc_file_hash_tfm loop
  2026-07-13 · Gaosheng Cui <hidden>
• COOLING5d [PATCH v6 2/2] ima: measure userspace policy writes before parsing
  2026-07-13 · Enrico Bravi <hidden>
• COOLING5d [PATCH v6 1/2] ima: add critical data measurement for loaded policy
  2026-07-13 · Enrico Bravi <hidden>
• COOLING7d REVIEWED: 2 (2M) [PATCH v2 09/10] tpm-buf: Memory-safe allocations
  2026-07-11 · Ross Philipson <hidden>
• COOLING7d REVIEWED: 1 (0M) [PATCH v2 07/10] tpm-buf: Merge TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOW
  2026-07-11 · Ross Philipson <hidden>
• COOLING7d [PATCH v2 01/10] tpm: Initial step to reorganize TPM public headers
  2026-07-11 · Ross Philipson <hidden>
• WARM2d [PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
  2026-07-08 · David Windsor <hidden>
• DORMANTno replies [PATCH v2] ima: correctly recover number of violations after kexec
  2026-07-06 · Enrico Bravi <hidden>
• COOLING11d [PATCH v5 2/2] ima: measure userspace policy writes before parsing
  2026-07-02 · Enrico Bravi <hidden>
• COOLING11d [PATCH v5 1/2] ima: add critical data measurement for loaded policy
  2026-07-02 · Enrico Bravi <hidden>
• COLD17d [PATCH v4 bpf-next 2/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-30 · David Windsor <hidden>
• COLD17d [PATCH v4 bpf-next 1/3] security: pass inode_init_security xattrs via struct lsm_xattrs
  2026-06-30 · David Windsor <hidden>
• COLD20d [PATCH] ima: correctly recover number of violations after kexec
  2026-06-19 · Enrico Bravi <hidden>
• COLD23d [PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-18 · David Windsor <hidden>
• COLD19d [PATCH v4 2/2] ima: measure buffer sent to securityfs policy file
  2026-06-17 · Enrico Bravi <hidden>
• COLD19d [PATCH v4 1/2] ima: measure loaded policy after write on securityfs policy file
  2026-06-17 · Enrico Bravi <hidden>
• COLD41d IN LINUX-NEXT [PATCH next] keys: Replace strcpy(derived_buf, "AUTH_KEY") with strscpy(..., HASH_SIZE)
  2026-06-06 · <hidden>
• COLD40d [PATCH v7 11/12] ima: Support staging and deleting N measurements records
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d [PATCH v7 10/12] ima: Add support for flushing the hash table when staging measurements
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d REVIEWED: 1 (1M) [PATCH v7 09/12] ima: Add support for staging measurements with prompt
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d REVIEWED: 5 (5M) [PATCH v7 08/12] ima: Introduce ima_dump_measurement()
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d REVIEWED: 5 (5M) [PATCH v7 07/12] ima: Use snprintf() in create_securityfs_measurement_lists
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d [PATCH v7 06/12] ima: Mediate open/release method of the measurements list
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d REVIEWED: 5 (5M) [PATCH v7 05/12] ima: Introduce _ima_measurements_start() and _ima_measurements_next()
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d [PATCH v7 04/12] ima: Introduce per binary measurements list type binary_runtime_size value
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d REVIEWED: 5 (5M) [PATCH v7 03/12] ima: Introduce per binary measurements list type ima_num_records counter
  2026-06-05 · Roberto Sassu <hidden>
• COLD40d REVIEWED: 5 (5M) [PATCH v7 02/12] ima: Replace static htable queue with dynamically allocated array
  2026-06-05 · Roberto Sassu <hidden>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE185d REVIEWED: 1 (0M) [PATCH] tpm2-sessions: Fix out of range indexing in name_size
  2026-01-08 · Jarkko Sakkinen <jarkko@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 1 (0M) [PATCH v2] tpm2-sessions: Fix out of range indexing in name_size
  2026-01-14 · Jarkko Sakkinen <jarkko@kernel.org> · 1 Reviewed-by
• STALE118d REVIEWED: 1 (1M) [PATCH v9 11/11] tpm-buf: Implement managed allocations
  2026-01-25 · Jarkko Sakkinen <jarkko@kernel.org> · 1 Reviewed-by
• STALE164d REVIEWED: 4 (4M) [PATCH v4] ima: Fallback to ctime check for FS without kstat.change_cookie
  2026-01-29 · Frederick Lawler <hidden> · 1 Reviewed-by
• STALE118d REVIEWED: 1 (1M) [PATCH v2 2/2] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-02-20 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by
• STALE141d REVIEWED: 8 (8M) [PATCH 1/2] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-02-26 · Thomas Weißschuh <linux@weissschuh.net> · 3 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.12-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.6-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.1-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 5.15-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE163d [PATCH v3 1/3] ima: make ima event log trimming configurable
  2026-01-06 · steven chen <hidden>
• STALE163d [PATCH v3 3/3] ima: add new critical data record to measure log trimming
  2026-01-06 · steven chen <hidden>
• DORMANTno replies [PATCH] efi: Mark UEFI skip cert quirks list as __initconst
  2026-01-21 · Thomas Weißschuh <hidden>
• STALE118d [PATCH v9 07/11] KEYS: trusted: Re-orchestrate tpm2_read_public() calls
  2026-01-25 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE162d [PATCH v5 1/3] ima: Unify vfs_getattr_nosec() stat comparisons under helper function
  2026-01-30 · Frederick Lawler <hidden>
• STALE163d [PATCH v4 1/3] ima: make ima event log trimming configurable
  2026-02-05 · steven chen <hidden>
• STALE163d [PATCH v4 2/3] ima: trim N IMA event log records
  2026-02-05 · steven chen <hidden>
• DORMANTno replies [PATCH v4 3/3] ima: add new critical data record to measure log trim
  2026-02-05 · steven chen <hidden>
• STALE156d [PATCH v6 1/3] ima: Unify vfs_getattr_nosec() stat comparisons under helper function
  2026-02-09 · Frederick Lawler <hidden>
• STALE156d [PATCH v6 2/3] ima: Make integrity_inode_attrs_changed() call into VFS
  2026-02-09 · Frederick Lawler <hidden>