documentation

Most active threads (last 7 days)

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in linux-security-module touching this subsystem.

• KEYS: Sanitize the garbage collector v5 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 09/12] rxrpc: Move key types to their own module 2026-11-08
  2026-11-08 · Jarkko Sakkinen <jarkko@kernel.org>
• [PATCH] docs: landlock: clarify F_SETOWN signal scoping 2026-11-08 · Shi Lecun <hidden>
• KEYS: Replace assoc_array with rhashtable v6 · 1 matching patch

  Entire posting: REVIEWED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v6 3/3] lib: Remove assoc_array 2026-11-07
  2026-11-07 · Jarkko Sakkinen <jarkko@kernel.org>
• [PATCH v3 2/2] KEYS: Reject keyring creation with overridden credentials 2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• [PATCH v3 1/2] KEYS: Return user session keyring on lookup 2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• Extend PKWM to support user-created wrapping keys v6 · 2 matching patches

  Entire posting: PENDING · 2 of 9 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v6 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management 2026-11-05
  • [PATCH v6 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label 2026-11-05
  2026-11-05 · Srish Srinivasan <ssrish@linux.ibm.com>
• KEYS: Replace assoc_array with rhashtable v5 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 3/3] lib: Remove assoc_array 2026-11-05
  2026-11-05 · Jarkko Sakkinen <jarkko@kernel.org>
• [PATCH v2 01/13] cred: gather the rules for acting on a task by uid 2026-11-04 · Josef Bacik <josef@toxicpanda.com>
• memcg: dma-buf cgroup accounting and charge transfer v4 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure 2026-11-04
  • [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg 2026-11-04
  2026-11-04 · Albert Esteve <hidden>
• mseal sysmap: Choose system mapping sealing at boot v2 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 6/8] mm/mseal: Seal system mappings in __install_special_mapping() 2026-11-03
  • [PATCH v2 7/8] mm/mseal: Add no_mseal_sys_mappings boot parameter 2026-11-03
  2026-11-03 · Chris Down <chris@chrisdown.name>
• Landlock: Restrict POSIX message queue creation and access v2 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 2/4] Landlock: Enforce MAKE_REG for POSIX message queue creation 2026-11-02
  • [PATCH v2 3/4] Landlock: Add POSIX message queue scoping 2026-11-02
  2026-11-02 · Oxana Kharitonova <hidden>
• ns: fixes for the namespace LSM hooks v2 · 1 matching patch

  Entire posting: PENDING · 3 of 7 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 4/7] ns: allocate the namespace id before the namespace_init hook 2026-10-29
  2026-10-29 · Christian Brauner <brauner@kernel.org>
• [RFC PATCH v2] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only 2026-10-29 · Amelia Crate <hidden>
• [PATCH v2 3/3] Documentation: ipe: document the IPE keyring 2026-10-29 · Manuel Huber via B4 Relay <devnull+manuelh.nvidia.com@kernel.org>
• [PATCH v2 1/3] ipe: add the .ipe policy keyring 2026-10-29 · Manuel Huber via B4 Relay <devnull+manuelh.nvidia.com@kernel.org>
• [PATCH v2 2/3] keys: add KEY_SPEC_IPE_KEYRING 2026-10-29 · Manuel Huber via B4 Relay <devnull+manuelh.nvidia.com@kernel.org>
• userns: per-namespace capability bounding set and opt-in netns loopback v1 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/8] userns: introduce capability bounding set for user namespaces 2026-10-28
  • [PATCH 3/8] userns: allow restricting capability bounding set via clone3() 2026-10-28
  2026-10-28 · Hallgrimur H. Gunnarsson <hidden>
• security: introduce Kernel Assurance Plane v2 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 1/6] docs: security: Describe the Kernel Assurance Plane design 2026-10-28
  2026-10-28 · Ketan Bhardwaj <hidden>
• memcg: dma-buf cgroup accounting and charge transfer v3 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure 2026-10-27
  • [PATCH v3 2/8] dma-heap: charge dma-buf memory via explicit memcg 2026-10-27
  2026-10-27 · Albert Esteve <hidden>
• mseal sysmap: Choose system mapping sealing at boot v1 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 1/3] mseal sysmap: Add mseal_system_mappings= boot parameter 2026-10-27
  • [PATCH 2/3] mseal sysmap: Allow with CHECKPOINT_RESTORE, default off 2026-10-27
  2026-10-27 · Chris Down <chris@chrisdown.name>
• landlock: Add READ_METADATA and WRITE_METADATA access rights v3 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 -next 11/18] LSM: rename the inode xattr hooks to path_xattr hooks 2026-10-27
  • [PATCH v3 -next 18/18] Documentation: Update landlock doc for metadata rights 2026-10-27
  2026-10-27 · Cai Xinchen <hidden>
• landlock: Add access rights on created files rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC 2/3] landlock: Add access rights on created files 2026-10-24
  2026-10-24 · Farid Zakaria <hidden>
• ima: reject modsig when detached data cannot be supplied v4 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 1/2] ima: discard modsig when detached data cannot be supplied 2026-10-24
  2026-10-24 · Jérémy Jean <hidden>
• [RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only 2026-10-23 · Amelia Crate <hidden>
• LANDED [PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes 2026-10-22 · Eric Biggers <ebiggers@kernel.org>
• ima: reject modsig when detached data cannot be supplied v3 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 1/2] ima: discard modsig when detached data cannot be supplied 2026-10-21
  2026-10-21 · Jérémy Jean <hidden>
• [RFC PATCH] docs: security: Describe the Kernel Assurance Plane design 2026-10-21 · Ketan Bhardwaj <hidden>
• memcg: dma-buf cgroup accounting and charge transfer v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC v2 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure 2026-10-21
  • [PATCH RFC v2 2/8] dma-heap: charge dma-buf memory via explicit memcg 2026-10-21
  2026-10-21 · Albert Esteve <hidden>
• UUID and GUID user and group ids (*_r system calls) v2 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 35/41] Documentation: describe UUID and GUID user and group ids 2026-10-21
  • [RFC PATCH v2 41/41] Documentation: uid_r: describe SMB and NFSv4 2026-10-21
  2026-10-21 · Jan Koester <hidden>
• IPE: add a dedicated policy keyring rfc · 3 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH RFC 1/4] ipe: add the .ipe policy keyring 2026-10-19
  • [PATCH RFC 2/4] keys: add KEY_SPEC_IPE_KEYRING 2026-10-19
  • [PATCH RFC 3/4] Documentation: ipe: document the IPE keyring 2026-10-19
  2026-10-19 · Manuel Huber <hidden>