capabilities · Supported

Maintainers

• M Serge Hallyn <serge@hallyn.com>

Paths

• F include/linux/capability.h
• F include/trace/events/capability.h
• F include/uapi/linux/capability.h
• F kernel/capability.c
• F security/commoncap.c
• F security/commoncap_test.c

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH v3 0/5] Fix quota evasion on xfs and add capable_noaudit
  2026-07-02 09:39 · 2 replies in 7d · cem@kernel.org

Active reviewers (last 30 days)

• Christoph Hellwig <hch@lst.de>
  2 attestations (2 Reviewed-by) · last on 2026-07-02
• Darrick J. Wong <djwong@kernel.org>
  1 attestation (1 Reviewed-by) · last on 2026-07-02
• Serge Hallyn <serge@hallyn.com>
  1 attestation (1 Reviewed-by) · last on 2026-07-02

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• HOTtoday REVIEWED: 5 (5M) [PATCH v3 5/5] capability: unexport has_capability_noaudit
  2026-07-02 · cem@kernel.org
• HOTtoday REVIEWED: 6 (6M) [PATCH v3 2/5] capability: Add new capable_noaudit
  2026-07-02 · cem@kernel.org
• COOLING5d [RFC PATCH 4/4] capability: unexport has_capability_noaudit
  2026-06-26 · cem@kernel.org
• COOLING5d [RFC PATCH 1/4] capabily: Add new capable_noaudit
  2026-06-26 · cem@kernel.org
• COLD20d [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-26 · Aaron Tomlin <atomlin@atomlin.com>
• COLD52d [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• COLD56d [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• STALE133d [PATCH] lsm: move inode IS_PRIVATE checks to individual LSMs
  2026-02-20 · <hidden>
• STALE160d [PATCH] ipc: don't audit capability check in ipc_permissions()
  2026-01-22 · Ondrej Mosnacek <omosnace@redhat.com>
• STALE178d [PATCH v6] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2026-01-07 · Ryan Foster <hidden>
• STALE178d [PATCH v5] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-30 · Ryan Foster <hidden>
• STALE178d [PATCH v5] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-29 · Ryan Foster <hidden>
• STALE178d [PATCH v4] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-28 · Ryan Foster <hidden>
• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE178d [PATCH v3 sec cap tests] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-18 · Ryan Foster <hidden>
• STALE178d [PATCH] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-04 · Ryan Foster <hidden>
• STALE178d [PATCH v2] security: Rename functions and add namespace mapping tests
  2025-11-21 · Ryan Foster <hidden>
• STALE230d Re: [PATCH] Clarify the rootid_owns_currentns
  2025-11-19 · "Serge E. Hallyn" <serge@hallyn.com>
• STALE200d [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-18 · Bernd Edlinger <hidden>
• STALE230d [PATCH] Clarify the rootid_owns_currentns
  2025-11-14 · "Serge E. Hallyn" <serge@hallyn.com>
• STALE178d [PATCH] security: Add KUnit tests for rootid_owns_currentns()
  2025-11-10 · Ryan Foster <hidden>
• STALE159d REVIEWED: 21 (21M) [PATCH v5 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-10-17 · Paul Moore <paul@paul-moore.com>
• STALE270d REVIEWED: 16 (16M) [PATCH v4 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-09-16 · Paul Moore <paul@paul-moore.com>
• STALE298d REVIEWED: 16 (16M) [PATCH v3 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-08-14 · Paul Moore <paul@paul-moore.com>
• STALE343d REVIEWED: 15 (15M) [RFC PATCH v2 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-07-21 · Paul Moore <paul@paul-moore.com>
• STALE367d REVIEWED: 6 (5M) [PATCH v2 1/1] uapi: fix broken link in linux/capability.h
  2025-07-02 · Ariel Otilibili <hidden>
• STALE367d [PATCH 1/1] uapi: fix broken link in linux/capability.h
  2025-06-29 · Ariel Otilibili <hidden>
• STALE412d REVIEWED: 2 (2M) [PATCH v2] exec: Correct the permission check for unsafe exec
  2025-05-20 · Eric W. Biederman <hidden>
• STALE417d [PATCH] exec: Correct the permission check for unsafe exec
  2025-05-15 · Eric W. Biederman <hidden>
• STALE351d [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs
  2025-04-09 · Paul Moore <paul@paul-moore.com>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE178d [PATCH v3 sec cap tests] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-18 · Ryan Foster <hidden>
• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE178d [PATCH v5] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-29 · Ryan Foster <hidden>