Reviews by paul@paul-moore.com
· linux-security-module
All review-attestation trailers
(Reviewed-by / Acked-by /
Tested-by / Reported-by /
Suggested-by / Co-developed-by /
Reported-and-tested-by)
by this address on the linux-security-module archive.
100 attestations · capped at 100 most-recent. (57 Acked-by, 26 Reviewed-by, 15 Suggested-by, 2 Tested-by)
-
HOTtoday
[PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
2026-07-08 · Suggested-by -
WARM1d
REVIEWED: 5 (5M) Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
2026-07-07 · Reviewed-by -
COOLING14d
REVIEWED: 5 (5M) Re: [PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init
2026-07-02 · Acked-by -
COLD45d
REVIEWED: 5 (5M) Re: [PATCH net v2 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr
2026-06-02 · Acked-by -
COLD45d
REVIEWED: 5 (5M) Re: [PATCH net v2] netlabel: validate unlabeled mask attribute length
2026-06-02 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH 3/3] apparmor: replace get_zeroed_page() with kzalloc()
2026-05-27 · Reviewed-by -
COLD52d
REVIEWED: 5 (5M) Re: [net-next] netlabel: fix IPv6 unlabeled address add error handling
2026-05-22 · Acked-by -
COLD52d
REVIEWED: 7 (7M) [PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency
2026-05-05 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH v7 01/11] lsm: Add LSM hook security_unix_find
2026-03-23 · Acked-by -
STALE120d
REVIEWED: 5 (5M) Re: [PATCH v6] backing_file: store user_path_file
2026-03-18 · Tested-by -
STALE122d
REVIEWED: 5 (5M) Re: [PATCH v3 02/12] audit: widen ino fields to u64
2026-03-06 · Acked-by -
STALE130d
REVIEWED: 9 (9M) [PATCH v3 06/15] selinux: Use simple_start_creating() / simple_done_creating()
2026-02-24 · Acked-by -
STALE143d
REVIEWED: 9 (9M) Re: [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
2026-02-23 · Acked-by -
STALE143d
REVIEWED: 9 (9M) [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
2026-02-23 · Acked-by -
STALE144d
REVIEWED: 5 (5M) Re: [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
2026-02-22 · Acked-by -
STALE141d
REVIEWED: 5 (5M) Re: [PATCH 2/2] fanotify: call fanotify_events_supported() before path_permission() and security_path_notify()
2026-02-20 · Reviewed-by -
STALE141d
REVIEWED: 5 (5M) Re: [PATCH 1/2] fanotify: avoid/silence premature LSM capability checks
2026-02-20 · Reviewed-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH 2/5] security: export binder symbols
2026-02-20 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH v1] mailmap: Add entry for Mickaël Salaün
2026-02-11 · Reviewed-by -
STALE144d
REVIEWED: 5 (5M) Re: [PATCH] ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
2026-01-26 · Reviewed-by -
STALE176d
REVIEWED: 5 (5M) Re: [PATCH] cipso: harden use of skb_cow() in cipso_v4_skbuff_setattr()
2026-01-22 · Acked-by -
STALE129d
REVIEWED: 5 (5M) Re: [PATCH v2 07/27] rust: cred: add __rust_helper to helpers
2026-01-07 · Acked-by -
STALE199d
REVIEWED: 5 (5M) Re: [PATCH] ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
2025-12-19 · Acked-by -
STALE240d
[PATCH v4] ima: Access decompressed kernel module to verify appended signature
2025-11-19 · Suggested-by -
STALE240d
[PATCH v3] ima: Access decompressed kernel module to verify appended signature
2025-11-19 · Suggested-by -
STALE268d
REVIEWED: 5 (5M) Re: [PATCH v2] x86/bpf: do not audit capability check in do_jit()
2025-10-21 · Reviewed-by -
STALE267d
REVIEWED: 7 (7M) [PATCH 6.17 004/563] pid: use ns_capable_noaudit() when determining net sysctl permissions
2025-10-13 · Reviewed-by -
STALE269d
REVIEWED: 5 (5M) Re: [PATCH v2] nbd: override creds to kernel when calling sock_{send,recv}msg()
2025-10-10 · Acked-by -
STALE305d
REVIEWED: 5 (5M) Re: [PATCH 1/6] security_dentry_init_security(): constify qstr argument
2025-09-11 · Acked-by -
STALE301d
REVIEWED: 5 (5M) Re: [PATCH] pid: use ns_capable_noaudit() when determining net sysctl permissions
2025-09-11 · Reviewed-by -
STALE309d
REVIEWED: 9 (9M) [PATCH net-next v2 1/8] ipv4: cipso: Simplify IP options handling in cipso_v4_error()
2025-09-08 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH net-next 1/8] ipv4: cipso: Simplify IP options handling in cipso_v4_error()
2025-09-04 · Acked-by -
STALE321d
[PATCH v6 3/4] Audit: Add record for multiple task security contexts
2025-08-16 · Suggested-by -
STALE334d
[PATCH v5 3/5] Audit: Add record for multiple task security contexts
2025-08-16 · Suggested-by -
STALE339d
[PATCH v5 3/5] Audit: Add record for multiple task security contexts
2025-07-16 · Suggested-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH] tools/certs: Make print-cert-tbs-hash.sh compatible with recent OpenSSL
2025-07-09 · Tested-by -
STALE379d
REVIEWED: 5 (5M) Re: [PATCH] net: ipv6: Fix spelling mistake
2025-07-02 · Acked-by -
STALE377d
REVIEWED: 6 (5M) [PATCH v2 1/1] uapi: fix broken link in linux/capability.h
2025-07-02 · Reviewed-by -
STALE377d
REVIEWED: 5 (5M) Re: [PATCH 1/1] uapi: fix broken link in linux/capability.h
2025-07-02 · Reviewed-by -
STALE255d
[RFC PATCH 03/15] Audit: Add record for multiple task security contexts
2025-06-21 · Suggested-by -
STALE393d
REVIEWED: 5 (5M) [PATCH v2 net] calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
2025-06-17 · Acked-by -
STALE394d
REVIEWED: 5 (5M) Re: [PATCH v1 net] calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
2025-06-17 · Acked-by -
STALE366d
[PATCH v4 3/4] Audit: Add record for multiple task security contexts
2025-06-07 · Suggested-by -
STALE407d
REVIEWED: 5 (5M) [PATCH net] calipso: unlock rcu before returning -EAFNOSUPPORT
2025-06-04 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH v1 net] calipso: Don't call calipso functions for AF_INET sk.
2025-06-03 · Acked-by -
STALE420d
REVIEWED: 5 (5M) Re: [PATCH v8 4/9] coredump: add coredump socket
2025-05-22 · Reviewed-by -
STALE409d
REVIEWED: 5 (5M) Re: [PATCH v1 net] calipso: Don't call calipso functions for AF_INET sk.
2025-05-22 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH v5 3/7] selinux: implement inode_file_[g|s]etattr hooks
2025-05-22 · Acked-by -
STALE420d
REVIEWED: 5 (5M) Re: [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr
2025-05-22 · Acked-by -
STALE235d
REVIEWED: 5 (5M) Re: [PATCH v3 8/9] lockdown: Make the relationship to MODULE_SIG a dependency
2025-04-29 · Acked-by -
STALE476d
LANDED: 5 (5M) [PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper
2025-03-20 · Acked-by -
STALE442d
[PATCH v3 3/5] Audit: Add record for multiple task security contexts
2025-03-19 · Suggested-by -
STALE493d
LANDED: 8 (8M) [PATCH v7 bpf-next 1/2] security: Propagate caller information in bpf hooks
2025-03-10 · Acked-by -
STALE495d
REVIEWED: 5 (5M) [PATCH v6 01/26] lsm: Add audit_log_lsm_data() helper
2025-03-08 · Acked-by -
STALE493d
REVIEWED: 8 (8M) [PATCH v6 bpf-next 1/2] security: Propagate caller information in bpf hooks
2025-03-08 · Acked-by -
STALE496d
REVIEWED: 8 (8M) [PATCH v5 bpf-next 1/2] security: Propagate caller information in bpf hooks
2025-03-07 · Acked-by -
STALE491d
[PATCH v2 2/6] Audit: Allow multiple records in an audit_buffer
2025-03-07 · Suggested-by -
STALE498d
REVIEWED: 5 (5M) Re: [PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks
2025-03-05 · Acked-by -
STALE503d
REVIEWED: 5 (5M) Re: [PATCH] security: keys: Make sysctl table const
2025-02-27 · Reviewed-by -
STALE504d
REVIEWED: 5 (5M) Re: [PATCH] selinux: add FILE__WATCH_MOUNTNS
2025-02-26 · Acked-by -
STALE504d
LANDED [PATCH] selinux: add FILE__WATCH_MOUNTNS
2025-02-24 · Suggested-by -
STALE506d
REVIEWED: 5 (5M) Re: [PATCH] lsm,nfs: fix memory leak of lsm_context
2025-02-21 · Acked-by -
STALE495d
REVIEWED: 5 (5M) [PATCH v5 01/24] lsm: Add audit_log_lsm_data() helper
2025-01-31 · Acked-by -
STALE518d
REVIEWED: 5 (5M) Re: [PATCH 0/2] security: Constify sysctl tables
2025-01-24 · Reviewed-by -
STALE529d
REVIEWED: 5 (5M) [PATCH v3 2/6] ima: Remove inode lock
2025-01-22 · Reviewed-by -
STALE500d
REVIEWED: 5 (5M) Re: [PATCH] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported
2025-01-15 · Reviewed-by -
STALE527d
REVIEWED: 19 (19M) [PATCH v5 -next 07/16] security: min_addr: move sysctl to security/min_addr.c
2025-01-11 · Acked-by -
STALE546d
REVIEWED: 5 (5M) [PATCH v4 02/30] lsm: Add audit_log_lsm_data() helper
2025-01-08 · Acked-by -
STALE556d
REVIEWED: 5 (5M) Re: [PATCH v3 2/23] lsm: Add audit_log_lsm_data() helper
2025-01-05 · Acked-by -
STALE554d
REVIEWED: 19 (19M) [PATCH v4 -next 07/15] security: min_addr: move sysctl to security/min_addr.c
2024-12-28 · Acked-by -
STALE554d
REVIEWED: 19 (19M) [PATCH v4 -next 07/15] security: min_addr: move sysctl to security/min_addr.c
2024-12-23 · Acked-by -
STALE554d
REVIEWED: 19 (19M) [PATCH v4 -next 07/15] security: min_addr: move sysctl to security/min_addr.c
2024-12-23 · Acked-by -
STALE496d
REVIEWED: 5 (5M) Re: [PATCH v2] capability: Remove unused has_capability
2024-12-19 · Reviewed-by -
STALE574d
REVIEWED: 19 (19M) [PATCH v2 4/5] security: Remove get_task_comm() and print task comm directly
2024-12-19 · Reviewed-by -
STALE536d
REVIEWED: 5 (5M) Re: [PATCH v2] lsm: check size of writes
2024-12-18 · Reviewed-by -
STALE574d
REVIEWED: 5 (5M) Re: [PATCH] capability: Remove unused has_capability
2024-12-18 · Reviewed-by -
STALE576d
[PATCH 2/6] Audit: Allow multiple records in an audit_buffer
2024-12-17 · Suggested-by -
STALE577d
REVIEWED: 5 (5M) Re: [PATCH 5/7] security: Replace get_task_comm() with %pTN
2024-12-16 · Reviewed-by -
STALE548d
LANDED: 9 (7M) [PATCH v23 1/8] exec: Add a new AT_EXECVE_CHECK flag to execveat(2)
2024-12-12 · Acked-by -
STALE583d
REVIEWED: 7 (7M) [PATCH v22 1/8] exec: Add a new AT_EXECVE_CHECK flag to execveat(2)
2024-12-05 · Acked-by -
DORMANTno replies
REVIEWED: 5 (5M) Re: [PATCH v21 1/6] exec: Add a new AT_EXECVE_CHECK flag to execveat(2)
2024-12-05 · Acked-by -
STALE593d
REVIEWED: 5 (5M) Re: [v8] security: add trace event for cap_capable
2024-11-30 · Reviewed-by -
STALE545d
REVIEWED: 5 (5M) [PATCH v2 2/7] ima: Remove inode lock
2024-11-28 · Reviewed-by -
STALE623d
REVIEWED: 5 (5M) Re: [PATCH net-next v2] netlabel: document doi_remove field of struct netlbl_calipso_ops
2024-10-28 · Acked-by -
STALE632d
REVIEWED: 5 (5M) Re: [PATCH v2] mm: Split critical region in remap_file_pages() and invoke LSMs in between
2024-10-19 · Reviewed-by -
STALE641d
REVIEWED: 5 (5M) [PATCH v2] fsnotify, lsm: Decouple fsnotify from lsm
2024-10-13 · Acked-by -
STALE641d
REVIEWED: 5 (5M) Re: [PATCH] fsnotify, lsm: Separate fsnotify_open_perm() and security_file_open()
2024-10-11 · Acked-by -
STALE634d
REVIEWED: 5 (5M) Re: [PATCH RFC v1 3/7] selinux: Fix inode numbers in error messages
2024-10-11 · Acked-by -
STALE634d
REVIEWED: 5 (5M) Re: [PATCH RFC v1 2/7] audit: Fix inode numbers
2024-10-11 · Acked-by -
STALE575d
REVIEWED: 19 (19M) [PATCH v3 -next 07/15] security: min_addr: move sysctl to security/min_addr.c
2024-10-10 · Acked-by -
STALE643d
[PATCH v4 01/13] LSM: Add the lsm_prop data structure.
2024-10-09 · Suggested-by -
STALE597d
REVIEWED: 5 (5M) Re: [PATCH 1/3] ima: Remove inode lock
2024-10-09 · Reviewed-by -
STALE648d
REVIEWED: 5 (5M) [PATCH v9 3/7] security: Replace memcpy() with get_task_comm()
2024-10-07 · Acked-by -
STALE648d
REVIEWED: 6 (6M) [PATCH v9 2/7] auditsc: Replace memcpy() with strscpy()
2024-10-07 · Acked-by -
STALE630d
REVIEWED: 5 (5M) Re: [PATCH 1/1] netlabel: Add missing comment to struct field
2024-09-23 · Acked-by -
STALE653d
REVIEWED: 5 (5M) Re: [PATCH v10 4/8] rust: cred: add Rust abstraction for `struct cred`
2024-09-19 · Reviewed-by -
STALE653d
REVIEWED: 5 (5M) Re: [PATCH v10 5/8] rust: security: add abstraction for secctx
2024-09-19 · Acked-by -
STALE671d
[PATCH v3 01/13] LSM: Add the lsm_prop data structure.
2024-09-10 · Suggested-by -
STALE679d
REVIEWED: 5 (5M) Re: [PATCH v2 -next 07/15] security: min_addr: move sysctl into its own file
2024-09-03 · Acked-by -
STALE680d
[PATCH v2 01/13] LSM: Add the lsmblob data structure.
2024-08-30 · Suggested-by