audit subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M Eric Paris <eparis@redhat.com>

Paths

• F include/asm-generic/audit_*.h
• F include/linux/audit.h
• F include/linux/audit_arch.h
• F include/uapi/linux/audit.h
• F kernel/audit*
• F lib/*audit.c

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• COOLING13d [RFC PATCH 16/24] audit: add pidfd spawn child contexts
  2026-07-16 · Li Chen <hidden>
• STALE150d [PATCH RFC bpf-next 1/4] audit: Implement bpf_audit_log_*() wrappers
  2026-03-11 · Frederick Lawler <hidden>
• STALE187d [PATCH v3 02/12] audit: widen ino fields to u64
  2026-03-04 · Jeff Layton <jlayton@kernel.org>
• STALE199d [PATCH v2 003/110] audit: widen ino fields to u64
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE385d [PATCH v6 3/4] Audit: Add record for multiple task security contexts
  2025-08-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE385d [PATCH v6 4/4] Audit: Add record for multiple object contexts
  2025-08-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE399d [PATCH v5 5/5] Audit: Add record for multiple object contexts
  2025-08-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE399d [PATCH v5 3/5] Audit: Add record for multiple task security contexts
  2025-08-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE404d [PATCH v5 5/5] Audit: Add record for multiple object contexts
  2025-07-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE404d [PATCH v5 3/5] Audit: Add record for multiple task security contexts
  2025-07-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE319d [RFC PATCH 04/15] Audit: Add record for multiple object contexts
  2025-06-21 · Casey Schaufler <casey@schaufler-ca.com>
• STALE319d [RFC PATCH 03/15] Audit: Add record for multiple task security contexts
  2025-06-21 · Casey Schaufler <casey@schaufler-ca.com>
• STALE431d [PATCH v4 3/4] Audit: Add record for multiple task security contexts
  2025-06-07 · Casey Schaufler <casey@schaufler-ca.com>
• STALE431d [PATCH v4 4/4] Audit: Add record for multiple object contexts
  2025-06-07 · Casey Schaufler <casey@schaufler-ca.com>
• STALE477d [RFC PATCH 6/9] Loadpol LSM: emit an audit log
  2025-05-21 · Simon THOBY <hidden>
• STALE540d LANDED [PATCH v7 10/28] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status
  2025-03-20 · Mickaël Salaün <mic@digikod.net>
• STALE540d LANDED [PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials
  2025-03-20 · Mickaël Salaün <mic@digikod.net>
• STALE507d [PATCH v3 5/5] Audit: Add record for multiple object contexts
  2025-03-19 · Casey Schaufler <casey@schaufler-ca.com>
• STALE507d [PATCH v3 4/5] Audit: multiple subject lsm values for netlabel
  2025-03-19 · Casey Schaufler <casey@schaufler-ca.com>
• STALE507d [PATCH v3 3/5] Audit: Add record for multiple task security contexts
  2025-03-19 · Casey Schaufler <casey@schaufler-ca.com>
• STALE559d [PATCH v6 10/26] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status
  2025-03-08 · Mickaël Salaün <mic@digikod.net>
• STALE559d [PATCH v6 09/26] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials
  2025-03-08 · Mickaël Salaün <mic@digikod.net>
• STALE555d [PATCH v2 4/6] Audit: Add record for multiple task security contexts
  2025-03-07 · Casey Schaufler <casey@schaufler-ca.com>
• STALE555d [PATCH v2 6/6] Audit: Add record for multiple object contexts
  2025-03-07 · Casey Schaufler <casey@schaufler-ca.com>
• STALE555d [PATCH v2 5/6] Audit: multiple subject lsm values for netlabel
  2025-03-07 · Casey Schaufler <casey@schaufler-ca.com>
• STALE560d [PATCH v5 10/24] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status
  2025-01-31 · Mickaël Salaün <mic@digikod.net>
• STALE560d [PATCH v5 09/24] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials
  2025-01-31 · Mickaël Salaün <mic@digikod.net>
• STALE611d [PATCH v4 28/30] audit,landlock: Add AUDIT_EXE_LANDLOCK_DENY rule type
  2025-01-08 · Mickaël Salaün <mic@digikod.net>
• STALE611d [PATCH v4 09/30] landlock: Add AUDIT_LANDLOCK_DOM_{INFO,DROP} and log domain properties
  2025-01-08 · Mickaël Salaün <mic@digikod.net>
• STALE611d [PATCH v4 08/30] landlock: Add AUDIT_LANDLOCK_DENY and log ptrace denials
  2025-01-08 · Mickaël Salaün <mic@digikod.net>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COOLING13d [RFC PATCH 16/24] audit: add pidfd spawn child contexts
  2026-07-16 · Li Chen <hidden>