apparmor security module · Supported

Maintainers

• M John Johansen <john.johansen@canonical.com>
• M John Johansen <john@apparmor.net>
• M Georgia Garcia <georgia.garcia@canonical.com>

Paths

• F Documentation/admin-guide/LSM/apparmor.rst
• F security/apparmor/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-mm (capped at 30), ordered by date desc.

• COLD22d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD22d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD22d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD36d [PATCH 3/3] apparmor: replace get_zeroed_page() with kzalloc()
  2026-05-20 · "Mike Rapoport (Microsoft)" <rppt@kernel.org>
• STALE77d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE108d [PATCH v3 12/12] treewide: change inode->i_ino from unsigned long to u64
  2026-03-04 · Jeff Layton <jlayton@kernel.org>
• STALE120d [PATCH v2 105/110] security: replace PRIino with %llu/%llx format strings
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE120d [PATCH v2 049/110] security: use PRIino format for i_ino
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE125d [PATCH 51/61] security: update audit format strings for u64 i_ino
  2026-02-26 · Jeff Layton <jlayton@kernel.org>
• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE195d [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-18 · Bernd Edlinger <hidden>
• STALE152d [PATCH v4 54/54] d_make_discardable(): warn if given a non-persistent dentry
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE227d [PATCH v3 50/50] d_make_discardable(): warn if given a non-persistent dentry
  2025-11-11 · Al Viro <viro@zeniv.linux.org.uk>
• STALE219d [PATCH v2 50/50] d_make_discardable(): warn if given a non-persistent dentry
  2025-10-28 · Al Viro <viro@zeniv.linux.org.uk>
• STALE255d [PATCH 3/3] mm, treewide: make addr parameter of free_pages() void *
  2025-10-18 · Mike Rapoport <rppt@kernel.org>
• STALE255d [PATCH 2/3] mm, treewide: make get_free_pages() and friends return void *
  2025-10-18 · Mike Rapoport <rppt@kernel.org>
• STALE287d LANDED: 1 (0M) [PATCH v2 2/4] copy_process: pass clone_flags as u64 across calltree
  2025-09-01 · Simon Schuster via B4 Relay <devnull+schuster.simon.siemens-energy.com@kernel.org>
• STALE457d [PATCH] mm: Rename vm_area_struct to mm_area
  2025-04-01 · "Matthew Wilcox (Oracle)" <willy@infradead.org>
• STALE519d REVIEWED: 5 (3M) [PATCH v2] treewide: const qualify ctl_tables where applicable
  2025-01-10 · Joel Granados <joel.granados@kernel.org>
• STALE538d [PATCH] treewide: const qualify ctl_tables where applicable
  2025-01-09 · Joel Granados <joel.granados@kernel.org>
• STALE149d LANDED [PATCH v3 1/3] vfs: support caching symlink lengths in inodes
  2024-11-20 · Mateusz Guzik <hidden>
• STALE589d [PATCH v2 1/3] vfs: support caching symlink lengths in inodes
  2024-11-19 · Mateusz Guzik <hidden>
• STALE652d [RFC 6/6] apparmor: Switch labels to percpu ref managed mode
  2024-09-16 · Neeraj Upadhyay <hidden>
• STALE652d [RFC 5/6] apparmor: Switch labels to percpu refcount in atomic mode
  2024-09-16 · Neeraj Upadhyay <hidden>
• STALE751d [PATCH v1 1/1] treewide: Align match_string() with sysfs_match_string()
  2024-06-03 · Andy Shevchenko <andriy.shevchenko@linux.intel.com>
• STALE781d [PATCH v3 11/11] sysctl: treewide: constify the ctl_table argument of handlers
  2024-04-23 · Thomas Weißschuh <linux@weissschuh.net>
• STALE807d [PATCH 2/7] security: Remove the now superfluous sentinel element from ctl_table array
  2024-03-28 · Joel Granados via B4 Relay <devnull+j.granados.samsung.com@kernel.org>
• STALE839d [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers
  2024-03-15 · Thomas Weißschuh <linux@weissschuh.net>
• STALE887d [PATCH] exec: Check __FMODE_EXEC instead of in_execve for LSMs
  2024-01-24 · Kees Cook <hidden>
• STALE887d Re: [6.8-rc1 Regression] Unable to exec apparmor_parser from virt-aa-helper
  2024-01-24 · Kees Cook <hidden>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE77d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>