security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• WARM2d [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks
  2026-07-06 23:51 · 6 replies in 7d · Song Liu <song@kernel.org>
• HOTtoday [PATCH 0/2] Bring includes in linux/kmod.h up to date
  2026-07-08 15:46 · 1 reply in 7d · Petr Pavlu <petr.pavlu@suse.com>
• HOTtoday [PATCH 0/3] Implement LANDLOCK_RESTRICT_SELF_NNP_ON_EXEC
  2026-07-08 13:39 · 1 reply in 7d · Justin Suess <hidden>
• HOTtoday [PATCH v1] landlock: Update formatting
  2026-07-08 11:06 · 0 replies in 7d · Mickaël Salaün <mic@digikod.net>
• WARM1d [PATCH v2 -next 0/2] security: Fix call security_backing_file_free second time
  2026-07-07 08:23 · 2 replies in 7d · Cai Xinchen <hidden>
• HOTtoday [PATCH v5 bpf-next 0/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-07-08 00:10 · 1 reply in 7d · David Windsor <hidden>
• WARM1d [PATCH] selftests/lsm: Fix memory leak in attr_lsm_count
  2026-07-03 12:10 · 1 reply in 7d · Wang Yan <hidden>
• DORMANTno replies [PATCH v1] landlock: Harden sock_is_scoped() against file-less sockets
  2026-07-03 15:28 · 0 replies in 7d · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH v1] landlock: Fix kernel-doc for the nested quiet layer flag
  2026-07-03 14:17 · 0 replies in 7d · Mickaël Salaün <mic@digikod.net>
• COOLING5d [RFC PATCH 0/3] coredump, net: fix layer violation with direct connection
  2026-07-03 07:40 · 1 reply in 7d · John Ericson <hidden>

Active reviewers (last 30 days)

• Christian Brauner <brauner@kernel.org>
  10 attestations (9 Reviewed-by, 1 Suggested-by) · last on 2026-06-29
• Amir Goldstein <amir73il@gmail.com>
  9 attestations (9 Reviewed-by) · last on 2026-06-29
• Serge Hallyn <serge@hallyn.com>
  9 attestations (9 Reviewed-by) · last on 2026-06-29
• Stephen Smalley <stephen.smalley.work@gmail.com>
  2 attestations (2 Reviewed-by) · last on 2026-07-06
• Justin Suess <hidden>
  2 attestations (1 Co-developed-by, 1 Tested-by) · last on 2026-06-12
• Paul Moore <paul@paul-moore.com>
  1 attestation (1 Suggested-by) · last on 2026-07-08
• Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
  1 attestation (1 Acked-by) · last on 2026-07-06
• k2ci <hidden>
  1 attestation (1 Reported-by) · last on 2026-06-23
• Song Liu <song@kernel.org>
  1 attestation (1 Suggested-by) · last on 2026-06-18
• <hidden>
  1 attestation (1 Reported-by) · last on 2026-06-14

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• HOTtoday [PATCH 1/2] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-08 · Petr Pavlu <petr.pavlu@suse.com>
• HOTtoday [PATCH 1/3] landlock: Add LANDLOCK_RESTRICT_SELF_NNP_ON_EXEC
  2026-07-08 · Justin Suess <hidden>
• HOTtoday [PATCH v1] landlock: Update formatting
  2026-07-08 · Mickaël Salaün <mic@digikod.net>
• HOTtoday [PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
  2026-07-08 · David Windsor <hidden>
• DORMANTno replies [PATCH v2 -next 2/2] security: Fix call security_backing_file_free second time
  2026-07-07 · Cai Xinchen <hidden>
• WARM1d [PATCH v2 -next 1/2] security: Delete dumplicate assignment
  2026-07-07 · Cai Xinchen <hidden>
• WARM2d REVIEWED: 1 (1M) [PATCH v6 8/8] lsm: Remove security_sb_mount and security_move_mount
  2026-07-06 · Song Liu <song@kernel.org>
• WARM2d REVIEWED: 1 (1M) [PATCH v6 6/8] tomoyo: Convert from sb_mount to granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• WARM2d [PATCH v6 5/8] landlock: Convert from sb_mount to granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• WARM2d [PATCH v6 3/8] apparmor: Convert from sb_mount to granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• WARM2d [PATCH v6 2/8] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
  2026-07-06 · Song Liu <song@kernel.org>
• WARM2d REVIEWED: 1 (1M) [PATCH v6 1/8] lsm: Add granular mount hooks
  2026-07-06 · Song Liu <song@kernel.org>
• DORMANTno replies [PATCH v1] landlock: Harden sock_is_scoped() against file-less sockets
  2026-07-03 · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH v1] landlock: Fix kernel-doc for the nested quiet layer flag
  2026-07-03 · Mickaël Salaün <mic@digikod.net>
• WARM1d [PATCH v2] selftests/lsm: Fix memory leak in attr_lsm_count
  2026-07-03 · Wang Yan <hidden>
• COOLING5d [RFC PATCH 3/3] coredump, net: remove `SOCK_COREDUMP`
  2026-07-03 · John Ericson <hidden>
• WARM1d [PATCH] selftests/lsm: Fix memory leak in attr_lsm_count
  2026-07-03 · Wang Yan <hidden>
• DORMANTno replies [PATCH v3] hardening: Default randstruct off with rust for better allmodconfig support
  2026-07-02 · Mark Brown <broonie@kernel.org>
• COOLING6d [PATCH v2 1/2] landlock: fix TCP Fast Open connection bypass
  2026-07-01 · Matthieu Buffet <hidden>
• COOLING7d [PATCH v4 bpf-next 2/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-30 · David Windsor <hidden>
• COOLING7d [PATCH v4 bpf-next 1/3] security: pass inode_init_security xattrs via struct lsm_xattrs
  2026-06-30 · David Windsor <hidden>
• COOLING6d [PATCH] lsm: cleanup repeated lsm_blob_size_update() calls in lsm_prepare()
  2026-06-29 · Matt Bobrowski <mattbobrowski@google.com>
• COOLING8d REVIEWED: 13 (13M) [PATCH v3 stable/linux-6.12.y 2/3] lsm: add backing_file LSM hooks
  2026-06-29 · Cai Xinchen <hidden>
• COOLING8d [PATCH stable/linux-5.10.y 4/7] lsm: constify the 'file' parameter in security_binder_transfer_file()
  2026-06-29 · Cai Xinchen <hidden>
• COOLING8d REVIEWED: 13 (13M) [PATCH stable/linux-5.10.y 6/7] lsm: add backing_file LSM hooks
  2026-06-29 · Cai Xinchen <hidden>
• COOLING11d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.6.y 2/3] lsm: add backing_file LSM hooks
  2026-06-27 · Cai Xinchen <hidden>
• DORMANTno replies Re: [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-27 · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• COOLING11d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.12.y 1/2] lsm: add backing_file LSM hooks
  2026-06-27 · Cai Xinchen <hidden>
• COOLING12d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks
  2026-06-26 · Cai Xinchen <hidden>
• COOLING12d REVIEWED: 13 (13M) [PATCH v2 stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks
  2026-06-26 · Cai Xinchen <hidden>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE108d REVIEWED: 1 (1M) [PATCH v9 11/11] tpm-buf: Implement managed allocations
  2026-01-25 · Jarkko Sakkinen <jarkko@kernel.org> · 1 Reviewed-by
• STALE154d REVIEWED: 4 (4M) [PATCH v4] ima: Fallback to ctime check for FS without kstat.change_cookie
  2026-01-29 · Frederick Lawler <hidden> · 1 Reviewed-by
• STALE108d REVIEWED: 1 (1M) [PATCH v2 2/2] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-02-20 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by
• STALE131d REVIEWED: 8 (8M) [PATCH 1/2] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-02-26 · Thomas Weißschuh <linux@weissschuh.net> · 3 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.12-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.6-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 6.1-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 5.15-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• DORMANTno replies REVIEWED: 5 (5M) FAILED: Patch "ima: verify the previous kernel's IMA buffer lies in addressable RAM" failed to apply to 5.10-stable tree
  2026-03-01 · Sasha Levin <sashal@kernel.org> · 1 Reviewed-by
• STALE125d REVIEWED: 1 (1M) [PATCH v2 4/8] module: Give MODULE_SIG_STRING a more descriptive name
  2026-03-05 · Thomas Weißschuh <hidden> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE144d [RFC PATCH v3 5/8] landlock: Add UDP sendmsg access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE144d LANDED [RFC PATCH v3 2/8] landlock: Refactor TCP socket type check
  2025-12-12 · Matthieu Buffet <hidden>
• STALE144d [RFC PATCH v3 3/8] landlock: Add UDP bind+connect access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE207d [PATCH v5 02/12] KEYS: trusted: Remove dead branch from tpm2_unseal_cmd
  2025-12-13 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE207d [PATCH v5 07/12] KEYS: trusted: Re-orchestrate tpm2_read_public() calls
  2025-12-13 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE207d [PATCH v5 11/12] tpm: Send only one at most TPM2_GetRandom command
  2025-12-13 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE175d [PATCH v6 03/11] KEYS: trusted: Remove dead branch from tpm2_unseal_cmd
  2025-12-14 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE175d [PATCH v6 04/11] KEYS: trusted: Re-orchestrate tpm2_read_public() calls
  2025-12-14 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE175d [PATCH v6 07/11] tpm: Send only one at most TPM2_GetRandom command
  2025-12-14 · Jarkko Sakkinen <jarkko@kernel.org>
• STALE205d [PATCH v5 2/6] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT userspace api
  2025-12-14 · Justin Suess <hidden>