security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-rdma (capped at 30), ordered by date desc.

• COOLING7d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• COOLING7d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• COOLING7d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE89d REVIEWED: 1 (0M) [PATCH 1/3] lsm: add hook for firmware command validation
  2026-03-09 · Leon Romanovsky <leon@kernel.org>
• STALE496d REVIEWED: 5 (3M) [PATCH v2] treewide: const qualify ctl_tables where applicable
  2025-01-10 · Joel Granados <joel.granados@kernel.org>
• STALE515d [PATCH] treewide: const qualify ctl_tables where applicable
  2025-01-09 · Joel Granados <joel.granados@kernel.org>
• STALE509d [PATCH] net: Convert proto_ops::getname to sockaddr_storage
  2024-12-17 · Kees Cook <kees@kernel.org>
• STALE757d [PATCH v3 11/11] sysctl: treewide: constify the ctl_table argument of handlers
  2024-04-23 · Thomas Weißschuh <linux@weissschuh.net>
• STALE815d [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers
  2024-03-15 · Thomas Weißschuh <linux@weissschuh.net>
• STALE965d [PATCH 12/19] fs: convert kill_litter_super to litter_shutdown_sb
  2023-09-13 · Christoph Hellwig <hch@lst.de>
• STALE965d [PATCH 03/19] fs: release anon dev_t in deactivate_locked_super
  2023-09-13 · Christoph Hellwig <hch@lst.de>
• STALE1082d [PATCH 09/11] sysctl: Remove the end element in sysctl table arrays
  2023-06-21 · Joel Granados <hidden>
• STALE1172d [RFC PATCH 1/3] net: Drop the size argument from ->sendmsg()
  2023-03-22 · David Howells <dhowells@redhat.com>
• STALE1149d REVIEWED: 2 (2M) [PATCH 4.19 v3 6/6] ima: Handle -ESTALE returned by ima_filter_rule_match()
  2023-02-28 · GUO Zihua <hidden>
• STALE1149d REVIEWED: 1 (0M) [PATCH 4.19 v3 5/6] ima: Evaluate error in init_ima()
  2023-02-28 · GUO Zihua <hidden>
• STALE1149d [PATCH 4.19 v3 3/6] ima: use the lsm policy update notifier
  2023-02-28 · GUO Zihua <hidden>
• STALE1149d REVIEWED: 6 (5M) [PATCH 4.19 v3 2/6] LSM: switch to blocking policy update notifiers
  2023-02-28 · GUO Zihua <hidden>
• STALE1149d [PATCH 4.19 v3 4/6] ima: ima/lsm policy rule loading logic bug fixes
  2023-02-28 · GUO Zihua <hidden>
• STALE1202d REVIEWED: 2 (2M) [PATCH 4.19 v2 5/5] ima: Handle -ESTALE returned by ima_filter_rule_match()
  2023-02-16 · GUO Zihua <hidden>
• STALE1202d [PATCH 4.19 v2 3/5] ima: use the lsm policy update notifier
  2023-02-16 · GUO Zihua <hidden>
• STALE1202d REVIEWED: 6 (5M) [PATCH 4.19 v2 2/5] LSM: switch to blocking policy update notifiers
  2023-02-16 · GUO Zihua <hidden>
• STALE1202d REVIEWED: 1 (0M) [PATCH 4.19 v2 4/5] ima: Evaluate error in init_ima()
  2023-02-16 · GUO Zihua <hidden>
• STALE1288d [PATCH mm-unstable v1 20/20] mm: rename FOLL_FORCE to FOLL_PTRACE
  2022-11-16 · David Hildenbrand <hidden>
• STALE1484d [PATCH 27/32] KEYS: Use mem_to_flex_dup() with struct user_key_payload
  2022-05-04 · Kees Cook <hidden>
• STALE1484d [PATCH 26/32] ima: Use mem_to_flex_dup() with struct modsig
  2022-05-04 · Kees Cook <hidden>
• STALE2475d REVIEWED: 1 (1M) [PATCH v3 37/41] security/tomoyo: convert put_page() to put_user_page*()
  2019-08-07 · <hidden>
• STALE2541d [RFC][PATCH] wake_up_var() memory ordering
  2019-06-24 · Peter Zijlstra <hidden>
• STALE3038d [PATCH v2] net: make getname() functions return length rather than use int* parameter
  2018-02-12 · Denys Vlasenko <hidden>
• STALE3304d [PATCH v8 2/9] IB/core: Enforce PKey security on QPs
  2017-05-23 · Dan Jurgens <hidden>
• DORMANTno replies [PATCH v7 8/9] selinux: Add IB Port SMP access vector
  2017-05-19 · Dan Jurgens <hidden>