lockdown security module

Most active threads (last 7 days)

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in linux-security-module touching this subsystem.

• lockdown: fix the securityfs interface and add tests v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH -next 3/9] lockdown: bound the status string with scnprintf 2026-11-03
  2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 4/9] lockdown: select SECURITYFS 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 7/9] lockdown: move lockdown_reasons next to its only user 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 2/9] lockdown: remove useless decrement operation 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 1/9] lockdown: Add break in lockdown_write 2026-11-03 · Cai Xinchen <hidden>
• [PATCH -next 6/9] lockdown: drop an unused include and simplify secfs init 2026-11-03 · Cai Xinchen <hidden>
• lockdown: Prevent booting with lockdown enabled but IOMMU disabled v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 2/2] security: lockdown: Prevent boot with lockdown but no IOMMU 2026-11-02
  2026-11-02 · Mario Limonciello (AMD) <superm1@kernel.org>
• module: Introduce hash-based integrity checking v5 · 2 matching patches

  Entire posting: PENDING · 4 of 14 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency 2026-05-05
  • [PATCH v5 12/14] module: Introduce hash-based integrity checking 2026-05-05
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• [PATCH] lockdown: remove useless decrement operation 2026-05-01 · Kalevi Kolttonen <hidden>
• [PATCH -next] lockdown: Add break in lockdown_write 2026-01-19 · Cai Xinchen <hidden>
• module: Introduce hash-based integrity checking v4 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 14/17] lockdown: Make the relationship to MODULE_SIG a dependency 2026-01-13
  • [PATCH v4 15/17] module: Introduce hash-based integrity checking 2026-01-13
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• [PATCH v2] lockdown: Only log restrictions once 2025-11-19 · Daniel Tang <hidden>
• [PATCH] lockdown: Only log restrictions once 2025-11-19 · Daniel Tang <hidden>
• Rework the LSM initialization v5 · 2 matching patches

  Entire posting: PENDING · 21 of 34 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 07/11] lockdown: move initcalls to the LSM framework 2025-10-17
  • [PATCH v5 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-10-17
  2025-10-17 · Paul Moore <paul@paul-moore.com>
• Rework the LSM initialization v4 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-09-16
  • [PATCH v4 30/34] lockdown: move initcalls to the LSM framework 2025-09-16
  2025-09-16 · Paul Moore <paul@paul-moore.com>
• Rework the LSM initialization v3 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-08-14
  • [PATCH v3 30/34] lockdown: move initcalls to the LSM framework 2025-08-14
  2025-08-14 · Paul Moore <paul@paul-moore.com>
• [PATCH] lockdown: avoid extra call to strlen() in lockdown_read() 2025-08-14 · Dmitry Antipov <hidden>
• Allow individual features to be locked down v2 · 3 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 1/3] lockdown: Switch implementation to using bitmap 2025-07-28
  • [PATCH v2 2/3] lockdown/kunit: Introduce kunit tests 2025-07-28
  • [PATCH v2 3/3] lockdown: Use snprintf in lockdown_read 2025-07-28
  2025-07-28 · Nikolay Borisov <hidden>
• Rework the LSM initialization v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 08/34] lsm: replace the name field with a pointer to the lsm_id struct 2025-07-21
  • [RFC PATCH v2 30/34] lockdown: move initcalls to the LSM framework 2025-07-21
  2025-07-21 · Paul Moore <paul@paul-moore.com>
• Secure Boot lock down v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 1/2] security: introduce security_lock_kernel_down() 2025-06-26
  2025-06-26 · Hamza Mahfooz <hidden>
• module: Introduce hash-based integrity checking v3 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 8/9] lockdown: Make the relationship to MODULE_SIG a dependency 2025-04-29
  • [PATCH v3 9/9] module: Introduce hash-based integrity checking 2025-04-29
  2025-04-29 · Thomas Weißschuh <linux@weissschuh.net>
• Rework the LSM initialization rfc · 3 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH 05/29] lsm: replace the name field with a pointer to the lsm_id struct 2025-04-09
  • [RFC PATCH 24/29] lockdown: move initcalls to the LSM framework 2025-04-09
  • [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs 2025-04-09
  2025-04-09 · Paul Moore <paul@paul-moore.com>
• Allow individual features to be locked down v1 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 1/2] lockdown: Switch implementation to using bitmap 2025-03-21
  • [PATCH 2/2] lockdown/kunit: Introduce kunit tests 2025-03-21
  2025-03-21 · Nikolay Borisov <hidden>
• module: Introduce hash-based integrity checking v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 5/6] lockdown: Make the relationship to MODULE_SIG a dependency 2025-01-20
  • [PATCH v2 6/6] module: Introduce hash-based integrity checking 2025-01-20
  2025-01-20 · Thomas Weißschuh <linux@weissschuh.net>
• [PATCH V3] lockdown: Initialize array before use 2025-01-05 · Tanya Agarwal <hidden>
• [PATCH V2] lockdown: Initialize array before use 2025-01-04 · Tanya Agarwal <hidden>
• [PATCH] lockdown: Initialize array before use 2024-12-28 · Tanya Agarwal <hidden>
• [PATCH -next] lockdown: Make lockdown_lsmid static 2024-08-14 · Yue Haibing <hidden>
• LSM: Three basic syscalls v15 · 1 matching patch

  Entire posting: PENDING · 9 of 11 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v15 01/11] LSM: Identify modules by more than name 2023-09-12
  2023-09-12 · Casey Schaufler <casey@schaufler-ca.com>
• LSM: Three basic syscalls v14 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v14 01/11] LSM: Identify modules by more than name 2023-08-28
  2023-08-28 · Casey Schaufler <casey@schaufler-ca.com>