security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Active reviewers (last 30 days)

• Nicolas Schier <nsc@kernel.org>
  3 attestations (3 Reviewed-by) · last on 2026-05-17

Recent patches

Most-recent 30 patches in this subsystem on linux-kbuild (capped at 30), ordered by date desc.

• COOLING4d REVIEWED: 2 (2M) [PATCH v2 04/16] security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT
  2026-05-17 · Nathan Chancellor <nathan@kernel.org>
• COOLING4d REVIEWED: 2 (2M) [PATCH v2 03/16] security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCE
  2026-05-17 · Nathan Chancellor <nathan@kernel.org>
• COOLING4d REVIEWED: 2 (2M) [PATCH v2 02/16] security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGS
  2026-05-17 · Nathan Chancellor <nathan@kernel.org>
• COLD18d [PATCH v5 12/14] module: Introduce hash-based integrity checking
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• COLD18d REVIEWED: 7 (7M) [PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• COLD18d [PATCH v5 09/14] module: Move signature type check out of mod_check_sig()
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• COLD40d [PATCH v6 03/11] umh: add dirfd parameter
  2026-05-04 · Thomas Weißschuh <hidden>
• COLD31d [PATCH 04/14] security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT
  2026-04-29 · Nathan Chancellor <nathan@kernel.org>
• COLD31d [PATCH 03/14] security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCE
  2026-04-29 · Nathan Chancellor <nathan@kernel.org>
• COLD31d [PATCH 02/14] security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGS
  2026-04-29 · Nathan Chancellor <nathan@kernel.org>
• STALE64d [PATCH 2/5] hardening: Introduce Overflow Behavior Types support
  2026-03-31 · Kees Cook <kees@kernel.org>
• STALE79d REVIEWED: 1 (1M) [PATCH v3 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden>
• STALE100d REVIEWED: 1 (1M) [PATCH v2 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden>
• STALE101d [PATCH 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-02 · Thomas Weißschuh <hidden>
• STALE94d [PATCH v4 15/17] module: Introduce hash-based integrity checking
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE94d [PATCH v4 14/17] lockdown: Make the relationship to MODULE_SIG a dependency
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE94d [PATCH v4 13/17] module: Report signature type to users
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE94d [PATCH v4 08/17] module: Deduplicate signature extraction
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE94d [PATCH v4 03/17] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE137d [PATCH v5 34/36] security/tomoyo: Enable context analysis
  2025-12-19 · Marco Elver <elver@google.com>
• STALE176d [PATCH v4 33/35] security/tomoyo: Enable context analysis
  2025-11-20 · Marco Elver <elver@google.com>
• STALE211d [PATCH v3 33/35] security/tomoyo: Enable capability analysis
  2025-09-18 · Marco Elver <elver@google.com>
• STALE319d LANDED [PATCH v4 4/4] kstack_erase: Support Clang stack depth tracking
  2025-07-24 · Kees Cook <kees@kernel.org>
• STALE307d [PATCH v3 11/13] kstack_erase: Support Clang stack depth tracking
  2025-07-17 · Kees Cook <kees@kernel.org>
• STALE307d LANDED [PATCH v3 02/13] stackleak: Rename stackleak_track_stack to __sanitizer_cov_stack_depth
  2025-07-17 · Kees Cook <kees@kernel.org>
• STALE307d LANDED [PATCH v3 01/13] stackleak: Rename STACKLEAK to KSTACK_ERASE
  2025-07-17 · Kees Cook <kees@kernel.org>
• STALE339d [PATCH v2 12/14] kstack_erase: Support Clang stack depth tracking
  2025-05-23 · Kees Cook <kees@kernel.org>
• STALE339d [PATCH v2 02/14] stackleak: Rename stackleak_track_stack to __sanitizer_cov_stack_depth
  2025-05-23 · Kees Cook <kees@kernel.org>
• STALE339d [PATCH v2 01/14] stackleak: Rename STACKLEAK to KSTACK_ERASE
  2025-05-23 · Kees Cook <kees@kernel.org>
• STALE396d [PATCH 6/8] stackleak: Support Clang stack depth tracking
  2025-05-07 · Kees Cook <kees@kernel.org>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE100d REVIEWED: 1 (1M) [PATCH v2 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden> · 1 Reviewed-by
• STALE79d REVIEWED: 1 (1M) [PATCH v3 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden> · 1 Reviewed-by
• COOLING4d REVIEWED: 2 (2M) [PATCH v2 02/16] security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGS
  2026-05-17 · Nathan Chancellor <nathan@kernel.org> · 1 Reviewed-by
• COOLING4d REVIEWED: 2 (2M) [PATCH v2 03/16] security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCE
  2026-05-17 · Nathan Chancellor <nathan@kernel.org> · 1 Reviewed-by
• COOLING4d REVIEWED: 2 (2M) [PATCH v2 04/16] security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT
  2026-05-17 · Nathan Chancellor <nathan@kernel.org> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE176d [PATCH v4 33/35] security/tomoyo: Enable context analysis
  2025-11-20 · Marco Elver <elver@google.com>
• STALE101d [PATCH 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-02 · Thomas Weißschuh <hidden>
• COLD40d [PATCH v6 03/11] umh: add dirfd parameter
  2026-05-04 · Thomas Weißschuh <hidden>