landlock security module · Supported

Maintainers

• M Mickaël Salaün <mic@digikod.net>
• R Günther Noack <gnoack@google.com>

Paths

• F Documentation/admin-guide/LSM/landlock.rst
• F Documentation/security/landlock.rst
• F Documentation/userspace-api/landlock.rst
• F fs/ioctl.c
• F include/uapi/linux/landlock.h
• F samples/landlock/
• F security/landlock/
• F tools/testing/selftests/landlock/

Last 30 days

Recent patches

Most-recent 23 patches in this subsystem on linux-trace-kernel, ordered by date desc.

• COOLING12d [PATCH v2 08/17] landlock: Add restrict_self and free_domain tracepoints
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 13/17] selftests/landlock: Add trace event test infrastructure and tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 02/17] landlock: Move domain query functions to domain.c
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 17/17] landlock: Document tracepoints
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 16/17] selftests/landlock: Add scope and ptrace tracepoint tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 11/17] landlock: Add landlock_deny_access_fs and landlock_deny_access_net
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 15/17] selftests/landlock: Add network tracepoint tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 10/17] landlock: Set audit_net.sk for socket access checks
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 14/17] selftests/landlock: Add filesystem tracepoint tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 07/17] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 06/17] landlock: Add create_ruleset and free_ruleset tracepoints
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 09/17] landlock: Add tracepoints for rule checking
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 04/17] landlock: Split denial logging from audit into common framework
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 01/17] landlock: Prepare ruleset and domain type split
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• STALE274d [PATCH v8 3/5] treewide: Replace 'get_task_comm()' with 'strscpy_pad()'
  2025-08-21 · Bhupesh <hidden>
• STALE298d [PATCH v7 3/4] treewide: Replace 'get_task_comm()' with 'strscpy_pad()'
  2025-08-11 · Bhupesh <hidden>
• STALE318d [PATCH v5 3/3] treewide: Switch from tsk->comm to tsk->comm_str which is 64 bytes long
  2025-07-16 · Bhupesh <hidden>
• STALE376d [RFC PATCH v1 2/5] landlock: Merge landlock_find_rule() into landlock_unmask_layers()
  2025-05-23 · Mickaël Salaün <mic@digikod.net>
• STALE376d [RFC PATCH v1 1/5] landlock: Rename landlock_id to landlock_rule_ref
  2025-05-23 · Mickaël Salaün <mic@digikod.net>
• STALE376d [RFC PATCH v1 5/5] landlock: Add landlock_check_rule tracepoint
  2025-05-23 · Mickaël Salaün <mic@digikod.net>
• STALE376d [RFC PATCH v1 4/5] landlock: Add landlock_add_rule_fs tracepoint
  2025-05-23 · Mickaël Salaün <mic@digikod.net>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COOLING12d [PATCH v2 09/17] landlock: Add tracepoints for rule checking
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 04/17] landlock: Split denial logging from audit into common framework
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 07/17] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 14/17] selftests/landlock: Add filesystem tracepoint tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 11/17] landlock: Add landlock_deny_access_fs and landlock_deny_access_net
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 15/17] selftests/landlock: Add network tracepoint tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 16/17] selftests/landlock: Add scope and ptrace tracepoint tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 17/17] landlock: Document tracepoints
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 02/17] landlock: Move domain query functions to domain.c
  2026-04-06 · Mickaël Salaün <mic@digikod.net>
• COOLING12d [PATCH v2 13/17] selftests/landlock: Add trace event test infrastructure and tests
  2026-04-06 · Mickaël Salaün <mic@digikod.net>