capabilities · Supported

Maintainers

• M Serge Hallyn <serge@hallyn.com>

Paths

• F include/linux/capability.h
• F include/trace/events/capability.h
• F include/uapi/linux/capability.h
• F kernel/capability.c
• F security/commoncap.c
• F security/commoncap_test.c

Last 30 days

Most active threads (last 7 days)

• WARM3d [PATCH 00/27] fs: port to const struct mnt_idmap
  2026-09-01 12:15 · 2 replies in 7d · Christian Brauner <brauner@kernel.org>

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• WARM3d [PATCH 13/27] fs: port xattr to const mnt_idmap
  2026-09-01 · Christian Brauner <brauner@kernel.org>
• WARM3d [PATCH 08/27] fs: port privilege checking helpers to const mnt_idmap
  2026-09-01 · Christian Brauner <brauner@kernel.org>
• COLD16d REVIEWED: 5 (5M) [PATCH v4 5/5] capability: unexport has_capability_noaudit
  2026-08-04 · cem@kernel.org
• COLD16d REVIEWED: 4 (4M) [PATCH v4 2/5] capability: Add new capable_noaudit
  2026-08-04 · cem@kernel.org
• COOLING7d [PATCH v4] security: Expand task_setscheduler LSM hook
  2026-07-20 · Aaron Tomlin <atomlin@atomlin.com>
• STALE61d REVIEWED: 5 (5M) [PATCH v3 5/5] capability: unexport has_capability_noaudit
  2026-07-02 · cem@kernel.org
• STALE61d REVIEWED: 6 (6M) [PATCH v3 2/5] capability: Add new capable_noaudit
  2026-07-02 · cem@kernel.org
• COLD43d [RFC PATCH 4/4] capability: unexport has_capability_noaudit
  2026-06-26 · cem@kernel.org
• COLD43d [RFC PATCH 1/4] capabily: Add new capable_noaudit
  2026-06-26 · cem@kernel.org
• STALE80d [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-26 · Aaron Tomlin <atomlin@atomlin.com>
• STALE112d [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• STALE116d [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• STALE193d [PATCH] lsm: move inode IS_PRIVATE checks to individual LSMs
  2026-02-20 · <hidden>
• STALE221d [PATCH] ipc: don't audit capability check in ipc_permissions()
  2026-01-22 · Ondrej Mosnacek <hidden>
• STALE239d [PATCH v6] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2026-01-07 · Ryan Foster <hidden>
• STALE239d [PATCH v5] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-30 · Ryan Foster <hidden>
• STALE239d [PATCH v5] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-29 · Ryan Foster <hidden>
• STALE239d [PATCH v4] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-28 · Ryan Foster <hidden>
• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE239d [PATCH v3 sec cap tests] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-18 · Ryan Foster <hidden>
• STALE239d [PATCH] security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
  2025-12-04 · Ryan Foster <hidden>
• STALE239d [PATCH v2] security: Rename functions and add namespace mapping tests
  2025-11-21 · Ryan Foster <hidden>
• STALE291d Re: [PATCH] Clarify the rootid_owns_currentns
  2025-11-19 · "Serge E. Hallyn" <serge@hallyn.com>
• STALE261d [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-18 · Bernd Edlinger <hidden>
• STALE291d [PATCH] Clarify the rootid_owns_currentns
  2025-11-14 · "Serge E. Hallyn" <serge@hallyn.com>
• STALE239d [PATCH] security: Add KUnit tests for rootid_owns_currentns()
  2025-11-10 · Ryan Foster <hidden>
• STALE219d REVIEWED: 21 (21M) [PATCH v5 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-10-17 · Paul Moore <paul@paul-moore.com>
• STALE330d REVIEWED: 16 (16M) [PATCH v4 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-09-16 · Paul Moore <paul@paul-moore.com>
• STALE358d REVIEWED: 16 (16M) [PATCH v3 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-08-14 · Paul Moore <paul@paul-moore.com>
• STALE404d REVIEWED: 15 (15M) [RFC PATCH v2 08/34] lsm: replace the name field with a pointer to the lsm_id struct
  2025-07-21 · Paul Moore <paul@paul-moore.com>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• COLD16d REVIEWED: 5 (5M) [PATCH v4 5/5] capability: unexport has_capability_noaudit
  2026-08-04 · cem@kernel.org · 2 Reviewed-by