selinux security module · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M Stephen Smalley <stephen.smalley.work@gmail.com>
• R Ondrej Mosnacek <omosnace@redhat.com>

Paths

• F Documentation/ABI/removed/sysfs-selinux-checkreqprot
• F Documentation/ABI/removed/sysfs-selinux-disable
• F Documentation/admin-guide/LSM/SELinux.rst
• F include/trace/events/avc.h
• F include/uapi/linux/selinux_netlink.h
• F scripts/selinux/
• F security/selinux/

Last 30 days

Active reviewers (last 30 days)

• Stephen Smalley <stephen.smalley.work@gmail.com>
  4 attestations (2 Reviewed-by, 2 Tested-by) · last on 2026-05-28

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• COOLING7d REVIEWED: 2 (2M) [PATCH v5 4/8] selinux: Convert from sb_mount to granular mount hooks
  2026-05-28 · Song Liu <song@kernel.org>
• COOLING14d [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-26 · Aaron Tomlin <atomlin@atomlin.com>
• COOLING14d [PATCH 2/3] selinux: hooks: use __getname() to allocate path buffer
  2026-05-20 · "Mike Rapoport (Microsoft)" <rppt@kernel.org>
• COOLING14d [PATCH 1/3] selinux: use k[mz]alloc() to allocate temporary buffers
  2026-05-20 · "Mike Rapoport (Microsoft)" <rppt@kernel.org>
• COOLING14d REVIEWED: 2 (2M) [PATCH v4 4/7] selinux: Convert from sb_mount to granular mount hooks
  2026-05-15 · Song Liu <song@kernel.org>
• COLD22d [PATCH RFC 4/5] selinux: Restrict cross-cgroup dma-heap charging
  2026-05-12 · Albert Esteve <hidden>
• COLD25d [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• COLD29d [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-09 · Aaron Tomlin <atomlin@atomlin.com>
• COLD29d REVIEWED: 1 (1M) [PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount
  2026-05-09 · Song Liu <song@kernel.org>
• COLD29d REVIEWED: 2 (2M) [PATCH v3 4/7] selinux: Convert from sb_mount to granular mount hooks
  2026-05-09 · Song Liu <song@kernel.org>
• COLD31d [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-05-03 · David Windsor <hidden>
• COLD33d REVIEWED: 1 (1M) [PATCH v2 7/7] lsm: Remove security_sb_mount and security_move_mount
  2026-04-30 · Song Liu <song@kernel.org>
• COLD33d REVIEWED: 2 (2M) [PATCH v2 4/7] selinux: Convert from sb_mount to granular mount hooks
  2026-04-30 · Song Liu <song@kernel.org>
• COLD40d [PATCH ported/repost v2] security,fs,nfs,net: update security_inode_listsecurity() interface
  2026-04-28 · Paul Moore <paul@paul-moore.com>
• COLD44d [PATCH] selinux: don't reserve xattr slot when we won't fill it
  2026-04-26 · David Windsor <hidden>
• STALE62d [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks
  2026-04-03 · Paul Moore <paul@paul-moore.com>
• STALE72d [PATCH v3 2/2] selinux: fix overlayfs mmap() and mprotect() access checks
  2026-03-27 · Paul Moore <paul@paul-moore.com>
• STALE76d [RFC PATCH v2 2/2] selinux: fix overlayfs mmap() and mprotect() access checks
  2026-03-23 · Paul Moore <paul@paul-moore.com>
• COLD58d [PATCH 7/7] lsm: Remove security_sb_mount and security_move_mount
  2026-03-18 · Song Liu <song@kernel.org>
• COLD58d [PATCH 4/7] selinux: Convert from sb_mount to granular mount hooks
  2026-03-18 · Song Liu <song@kernel.org>
• STALE84d [PATCH 3/3] selinux: fix overlayfs mmap() and mprotect() access checks
  2026-03-16 · Paul Moore <paul@paul-moore.com>
• STALE86d [PATCH v3 12/12] treewide: change inode->i_ino from unsigned long to u64
  2026-03-04 · Jeff Layton <jlayton@kernel.org>
• STALE98d [PATCH v2 105/110] security: replace PRIino with %llu/%llx format strings
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE98d [PATCH v2 049/110] security: use PRIino format for i_ino
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• STALE103d [PATCH 51/61] security: update audit format strings for u64 i_ino
  2026-02-26 · Jeff Layton <jlayton@kernel.org>
• COLD46d [RFC PATCH 3/3] LSM: Reserve use of secmarks
  2026-02-25 · Casey Schaufler <casey@schaufler-ca.com>
• STALE93d REVIEWED: 9 (9M) [PATCH v3 06/15] selinux: Use simple_start_creating() / simple_done_creating()
  2026-02-24 · NeilBrown <hidden>
• STALE106d REVIEWED: 9 (9M) [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
  2026-02-23 · NeilBrown <hidden>
• STALE106d [PATCH] lsm: move inode IS_PRIVATE checks to individual LSMs
  2026-02-20 · <hidden>
• STALE108d [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
  2026-02-04 · NeilBrown <hidden>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• DORMANTno replies [PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-12-19 · Bernd Edlinger <hidden>
• STALE84d [PATCH 3/3] selinux: fix overlayfs mmap() and mprotect() access checks
  2026-03-16 · Paul Moore <paul@paul-moore.com>
• STALE72d [PATCH v3 2/2] selinux: fix overlayfs mmap() and mprotect() access checks
  2026-03-27 · Paul Moore <paul@paul-moore.com>