netfilter · Maintained

Maintainers

• M Pablo Neira Ayuso <pablo@netfilter.org>
• M Florian Westphal <fw@strlen.de>
• R Phil Sutter <phil@nwl.cc>

Paths

• F include/linux/netfilter*
• F include/linux/netfilter/
• F include/net/netfilter/
• F include/uapi/linux/netfilter*
• F include/uapi/linux/netfilter/
• F net/*/netfilter.c
• F net/*/netfilter/
• F net/bridge/br_netfilter*.c
• F net/netfilter/
• F tools/testing/selftests/net/netfilter/

Last 30 days

Most active threads (last 7 days)

• WARM3d [PATCH v2 0/7] Change skb secmarks to x-array indexes
  2026-09-02 22:02 · 2 replies in 7d · Casey Schaufler <casey@schaufler-ca.com>
• WARM3d [PATCH 0/7] Change skb secmarks to x-array indexes
  2026-08-31 22:48 · 2 replies in 7d · Casey Schaufler <casey@schaufler-ca.com>

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• WARM3d [PATCH v2 7/7] net, lsm: Change skb secmarks to x-array indexes
  2026-09-02 · Casey Schaufler <casey@schaufler-ca.com>
• WARM3d [PATCH v2 1/7] net, smack: Create a function to set secmarks
  2026-09-02 · Casey Schaufler <casey@schaufler-ca.com>
• WARM3d [PATCH 7/7] net, lsm: Change skb secmarks to x-array indexes
  2026-08-31 · Casey Schaufler <casey@schaufler-ca.com>
• WARM3d [PATCH 1/7] net, smack: Create a function to set secmarks
  2026-08-31 · Casey Schaufler <casey@schaufler-ca.com>
• COLD23d [PATCH 7/7] net, lsm: Change skb secmarks to x-array indexes
  2026-08-13 · Casey Schaufler <casey@schaufler-ca.com>
• COLD23d [PATCH 1/7] net, smack: Create a function to set secmarks
  2026-08-13 · Casey Schaufler <casey@schaufler-ca.com>
• STALE238d REVIEWED: 1 (0M) [PATCH v3] selftests: complete kselftest include centralization
  2025-10-16 · Bala-Vignesh-Reddy <hidden>
• STALE238d [PATCH v2 2/2] selftests: Replace relative includes with non-relative for kselftest.h and kselftest_harness.h
  2025-08-30 · Bala-Vignesh-Reddy <hidden>
• STALE238d [PATCH 2/2] selftests: Replace relative includes with non-relative for kselftest.h and kselftest_harness.h
  2025-08-27 · Bala-Vignesh-Reddy <hidden>
• STALE609d [PATCH v2 lsm/dev] net: corrections for security_secid_to_secctx returns
  2024-12-20 · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies Re: [PATCH] net: corrections for security_secid_to_secctx returns
  2024-12-18 · Paul Moore <paul@paul-moore.com>
• STALE626d [PATCH lsm/dev] net: corrections for security_secid_to_secctx returns
  2024-12-11 · Casey Schaufler <casey@schaufler-ca.com>
• STALE673d [PATCH lsm/dev] netfilter: Use correct length value in ctnetlink_secctx_size
  2024-11-01 · Casey Schaufler <casey@schaufler-ca.com>
• STALE562d [PATCH v3 2/5] LSM: Replace context+len with lsm_context
  2024-10-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE562d [PATCH v3 1/5] LSM: Ensure the correct LSM context releaser
  2024-10-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE683d [PATCH v2 2/6] LSM: Replace context+len with lsm_context
  2024-10-14 · Casey Schaufler <casey@schaufler-ca.com>
• STALE683d [PATCH v2 1/6] LSM: Ensure the correct LSM context releaser
  2024-10-14 · Casey Schaufler <casey@schaufler-ca.com>
• STALE717d [PATCH 1/5] LSM: Replace context+len with lsm_context
  2024-09-17 · Casey Schaufler <casey@schaufler-ca.com>
• STALE835d [PATCH v5 36/68] selftests/net: Drop define _GNU_SOURCE
  2024-05-22 · Edward Liaw <hidden>
• STALE841d [PATCH v4 35/66] selftests/net: Drop define _GNU_SOURCE
  2024-05-10 · Edward Liaw <hidden>
• STALE846d [PATCH v3 37/68] selftests/net: Drop define _GNU_SOURCE
  2024-05-09 · Edward Liaw <hidden>
• STALE846d [PATCH v3 09/11] ipvs: constify ctl_table arguments of utility functions
  2024-04-23 · Thomas Weißschuh <linux@weissschuh.net>
• STALE846d [PATCH v3 11/11] sysctl: treewide: constify the ctl_table argument of handlers
  2024-04-23 · Thomas Weißschuh <linux@weissschuh.net>
• STALE904d [PATCH 09/11] ipvs: constify ctl_table arguments of utility functions
  2024-03-15 · Thomas Weißschuh <linux@weissschuh.net>
• STALE904d [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers
  2024-03-15 · Thomas Weißschuh <linux@weissschuh.net>
• STALE955d LANDED [PATCH v2 bpf-next 07/30] bpf: take into account BPF token when fetching helper protos
  2024-01-24 · Andrii Nakryiko <andrii@kernel.org>
• STALE963d [PATCH bpf-next 07/29] bpf: take into account BPF token when fetching helper protos
  2024-01-03 · Andrii Nakryiko <andrii@kernel.org>
• STALE803d [PATCH v39 17/42] LSM: Use lsmcontext in security_secid_to_secctx
  2023-12-15 · Casey Schaufler <casey@schaufler-ca.com>
• STALE803d REVIEWED: 9 (7M) [PATCH v39 16/42] LSM: Ensure the correct LSM context releaser
  2023-12-15 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1000d LANDED [PATCH v12 bpf-next 07/17] bpf: take into account BPF token when fetching helper protos
  2023-11-30 · Andrii Nakryiko <andrii@kernel.org>