← All active subsystems in linux-security-module

security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• HOTtoday PENDING · 3 of 7 reviewed [PATCH v2 0/7] ns: fixes for the namespace LSM hooks
  2026-10-29 16:41 · 3 replies in 7d · Christian Brauner <brauner@kernel.org>
• WARM1d [PATCH v3 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
  2026-10-27 11:39 · 13 replies in 7d · Cai Xinchen <hidden>
• WARM1d [RFC PATCH v2 0/6] security: introduce Kernel Assurance Plane
  2026-10-28 13:33 · 3 replies in 7d · Ketan Bhardwaj <hidden>
• HOTtoday [PATCH v2 0/3] IPE: add a dedicated policy keyring
  2026-10-29 00:31 · 2 replies in 7d · Manuel Huber via B4 Relay <devnull+manuelh.nvidia.com@kernel.org>
• HOTtoday [PATCH v5] KEYS: key_garbage_collector(): process in chunks
  2026-10-29 17:29 · 0 replies in 7d · Jarkko Sakkinen <jarkko@kernel.org>
• HOTtoday [PATCH v2] keys: Protect the update method check against type removal
  2026-10-29 16:07 · 0 replies in 7d · Cen Zhang <hidden>
• HOTtoday [PATCH] smack: do not override the subject label in overlayfs hooks
  2026-10-29 15:55 · 0 replies in 7d · Mateusz Moscicki <hidden>
• HOTtoday [RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only
  2026-10-29 15:14 · 1 reply in 7d · Amelia Crate <hidden>
• HOTtoday [PATCH] evm: Bound writes in evm_read_protected_xattrs() to buffer_size
  2026-10-29 14:27 · 0 replies in 7d · Roberto Sassu <hidden>
• WARM2d PENDING · 1 of 6 reviewed [PATCH v8 0/6] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
  2026-10-27 14:23 · 4 replies in 7d · Josef Bacik <josef@toxicpanda.com>

Active reviewers (last 30 days)

• David Howells <dhowells@redhat.com>
  13 attestations (13 Reviewed-by) · last on 2026-10-25
• R Nageswara Sastry <hidden>
  9 attestations (9 Tested-by) · last on 2026-10-18
• Bradley Morgan <hidden>
  8 attestations (8 Reviewed-by) · last on 2026-10-27
• Eric Biggers <ebiggers@kernel.org>
  7 attestations (4 Reviewed-by, 3 Suggested-by) · last on 2026-10-25
• Jarkko Sakkinen <jarkko@kernel.org>
  6 attestations (5 Reviewed-by, 1 Suggested-by) · last on 2026-10-19
• Tingmao Wang <hidden>
  6 attestations (6 Reviewed-by) · last on 2026-10-14
• <hidden>
  4 attestations (4 Reported-by) · last on 2026-10-29
• Christian Brauner (Amutable) <brauner@kernel.org>
  4 attestations (2 Reviewed-by, 2 Suggested-by) · last on 2026-10-08
• HARIHARA SUDHAN. R <hidden>
  3 attestations (3 Co-developed-by) · last on 2026-10-28
• Linus Torvalds <torvalds@linux-foundation.org>
  3 attestations (3 Co-developed-by) · last on 2026-10-25

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• HOTtoday [PATCH v5] KEYS: key_garbage_collector(): process in chunks
  2026-10-29 · Jarkko Sakkinen <jarkko@kernel.org>
• HOTtoday [PATCH v2 6/7] lsm: fix the security_namespace_init() kernel-doc
  2026-10-29 · Christian Brauner <brauner@kernel.org>
• HOTtoday [PATCH v2 4/7] ns: allocate the namespace id before the namespace_init hook
  2026-10-29 · Christian Brauner <brauner@kernel.org>
• HOTtoday [PATCH v2 1/7] lsm: always call the namespace_free hook
  2026-10-29 · Christian Brauner <brauner@kernel.org>
• HOTtoday [PATCH v2] keys: Protect the update method check against type removal
  2026-10-29 · Cen Zhang <hidden>
• HOTtoday [PATCH] smack: do not override the subject label in overlayfs hooks
  2026-10-29 · Mateusz Moscicki <hidden>
• HOTtoday [RFC PATCH v2] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only
  2026-10-29 · Amelia Crate <hidden>
• HOTtoday [PATCH] evm: Bound writes in evm_read_protected_xattrs() to buffer_size
  2026-10-29 · Roberto Sassu <hidden>
• HOTtoday [PATCH v4] KEYS: key_garbage_collector(): process in chunks
  2026-10-29 · Jarkko Sakkinen <jarkko@kernel.org>
• HOTtoday [PATCH] apparmor: fix race on NULL ctx->peer in update_sk_ctx()
  2026-10-29 · Emanuele Rocca <hidden>
• HOTtoday [PATCH] keys: Protect the update method check against type removal
  2026-10-29 · Cen Zhang <hidden>
• HOTtoday [RFC PATCH 08/14] treewide: Add a flag to detect the Apple T2 chip
  2026-10-29 · Atharva Tiwari <hidden>
• HOTtoday [PATCH v3] KEYS: key_garbage_collector(): process in chunks
  2026-10-29 · Jarkko Sakkinen <jarkko@kernel.org>
• HOTtoday [PATCH v2 2/3] keys: add KEY_SPEC_IPE_KEYRING
  2026-10-29 · Manuel Huber via B4 Relay <devnull+manuelh.nvidia.com@kernel.org>
• HOTtoday [PATCH v2 1/3] ipe: add the .ipe policy keyring
  2026-10-29 · Manuel Huber via B4 Relay <devnull+manuelh.nvidia.com@kernel.org>
• HOTtoday [PATCH 2/8] userns: introduce capability bounding set for user namespaces
  2026-10-28 · Hallgrimur H. Gunnarsson <hidden>
• WARM1d [PATCH v3] smack: preserve low-integrity labels across file copy via whitelist
  2026-10-28 · Tang Pengke <hidden>
• WARM1d [RFC PATCH v2 4/6] security: kap: add the securityfs control plane
  2026-10-28 · Ketan Bhardwaj <hidden>
• WARM1d [RFC PATCH v2 3/6] security: add the Kernel Assurance Plane LSM
  2026-10-28 · Ketan Bhardwaj <hidden>
• WARM1d [RFC PATCH v2 2/6] security: kap: add the LSM ID and internal headers
  2026-10-28 · Ketan Bhardwaj <hidden>
• HOTtoday [PATCH v2] KEYS: key_garbage_collector(): process in chunks
  2026-10-28 · Jarkko Sakkinen <jarkko@kernel.org>
• WARM1d [PATCH] KEYS: key_garbage_collector(): process in chunks
  2026-10-27 · Jarkko Sakkinen <jarkko@kernel.org>
• HOTtoday [PATCH v3 4/8] security: dma-buf: Add dma_buf_charge_cgroup LSM hook
  2026-10-27 · Albert Esteve <hidden>
• HOTtoday [PATCH v3 3/8] security: dma-buf: Add dma_buf_charge_task LSM hook
  2026-10-27 · Albert Esteve <hidden>
• WARM2d [PATCH v8 5/6] capabilities: don't let ptrace borrow CAP_SETFCAP
  2026-10-27 · Josef Bacik <josef@toxicpanda.com>
• WARM2d [PATCH v8 4/6] capabilities: limit fscaps to where CAP_SETFCAP reaches
  2026-10-27 · Josef Bacik <josef@toxicpanda.com>
• WARM2d [PATCH v8 2/6] userns: don't let setns() lend CAP_SETFCAP
  2026-10-27 · Josef Bacik <josef@toxicpanda.com>
• WARM2d REVIEWED: 1 (0M) [PATCH v8 1/6] userns: record how far up CAP_SETFCAP reaches
  2026-10-27 · Josef Bacik <josef@toxicpanda.com>
• WARM1d [PATCH 2/3] mseal sysmap: Allow with CHECKPOINT_RESTORE, default off
  2026-10-27 · Chris Down <chris@chrisdown.name>
• WARM1d [PATCH 1/3] mseal sysmap: Add mseal_system_mappings= boot parameter
  2026-10-27 · Chris Down <chris@chrisdown.name>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE160d REVIEWED: 1 (1M) [PATCH v3] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-05-22 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by
• STALE153d REVIEWED: 1 (0M) Re: [REPORT] landlock: SCOPE_SIGNAL bypass via F_SETOWN to invoker pgid -> SIGIO/SIGKILL to non-sandboxed targets
  2026-05-29 · <hidden> · 1 Tested-by
• STALE147d REVIEWED: 1 (0M) [PATCH v3 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass via F_SETOWN to invoker's pgid
  2026-05-29 · <hidden> · 1 Tested-by
• STALE119d REVIEWED: 1 (1M) [PATCH v6 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option +3 more in this series
  2026-06-05 · Yeoreum Yun <hidden> · 1 Reviewed-by
• STALE143d REVIEWED: 1 (1M) [PATCH v7 02/12] ima: Replace static htable queue with dynamically allocated array +11 more in this series
  2026-06-05 · Roberto Sassu <hidden> · 1 Reviewed-by
• STALE121d REVIEWED: 3 (3M) [PATCH stable/linux-5.10.y 6/7] lsm: add backing_file LSM hooks +6 more in this series
  2026-06-29 · Cai Xinchen <hidden> · 3 Reviewed-by
• STALE121d REVIEWED: 3 (3M) [PATCH v3 stable/linux-6.12.y 2/3] lsm: add backing_file LSM hooks +2 more in this series
  2026-06-29 · Cai Xinchen <hidden> · 3 Reviewed-by
• COLD27d REVIEWED: 1 (1M) [PATCH v6 1/8] lsm: Add granular mount hooks +7 more in this series
  2026-07-06 · Song Liu <song@kernel.org> · 1 Reviewed-by
• COLD49d REVIEWED: 1 (1M) [PATCH] rust: security: replace `core::mem::zeroed` with `pin_init::zeroed`
  2026-08-28 · Nils Lehnen <hidden> · 1 Reviewed-by
• COLD58d REVIEWED: 1 (1M) [PATCH v4] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-08-29 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE100d [RFC PATCH 16/20] landlock: Bump ABI version +19 more in this series
  2026-04-07 · Justin Suess <hidden>
• STALE199d [PATCH 2/5] landlock: add support for chmod and chown
  2026-04-12 · Jeffrey Bencteux <hidden>
• STALE196d [PATCH v3 1/4] integrity: Check for NULL returned by asymmetric_key_public_key +3 more in this series
  2026-04-16 · Stefan Berger <stefanb@linux.ibm.com>
• STALE168d [RFC PATCH v3 1/4] lsm: Allow LSMs to register for late_initcall_sync init +3 more in this series
  2026-04-24 · Jonathan McDowell <hidden>
• DORMANTno replies [PATCH 1/1] yama: clean-up ptrace relations upon activating YAMA_SCOPE_NO_ATTACH
  2026-04-28 · Ethan Ferguson <hidden>
• STALE174d [RFC PATCH 3/3] security: integrity: call load_uefi_certs() at late_initcall_sync +2 more in this series
  2026-05-05 · Yeoreum Yun <hidden>
• DORMANTno replies [PATCH 2/2] smack: show msgrcv() subject task in audit +1 more in this series
  2026-05-11 · Konstantin Andreev <hidden>
• STALE163d [PATCH RFC 3/5] security: dma-heap: Add dma_heap_alloc LSM hook +4 more in this series
  2026-05-12 · Albert Esteve <hidden>
• DORMANTno replies LANDED [PATCH v1] landlock: Account all audit data allocations to user space
  2026-05-13 · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH] apparmor: hold peer path references in aa_unix_file_perm()
  2026-05-15 · Zhang Cen <hidden>