security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-usb (capped at 30), ordered by date desc.

• COOLING8d [PATCH v6 4/4] tree-wide: purge verified remaining legacy ghost options
  2026-09-05 · Breno Rodrigues Alves <hidden>
• COOLING9d [PATCH v2] Kconfig: purge twenty-eight legacy ghost options (v2)
  2026-09-04 · Breno Rodrigues Alves <hidden>
• COOLING9d [PATCH] Kconfig: purge twenty-nine legacy ghost options
  2026-09-04 · Breno Rodrigues Alves <hidden>
• COLD38d [PATCH v5 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-27 · Atharva Tiwari <hidden>
• COLD48d [PATCH v4 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-24 · Atharva Tiwari <hidden>
• COLD54d [PATCH v3 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-21 · Atharva Tiwari <hidden>
• COLD55d [PATCH v2 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-21 · Atharva Tiwari <hidden>
• COLD56d [PATCH 1/2] treewide: Add a flag to detect the Apple T2 chip
  2026-07-19 · Atharva Tiwari <hidden>
• STALE95d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE95d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE95d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• STALE167d [PATCH net v3 04/11] list: Move on_list_rcu() to list.h and add on_list() also
  2026-03-26 · David Howells <dhowells@redhat.com>
• STALE151d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>
• STALE225d REVIEWED: 5 (5M) [PATCH v4 52/54] convert securityfs
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE225d REVIEWED: 5 (5M) [PATCH v4 53/54] kill securityfs_recursive_remove()
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE225d [PATCH v4 54/54] d_make_discardable(): warn if given a non-persistent dentry
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE225d REVIEWED: 1 (1M) [PATCH v4 10/54] configfs, securityfs: kill_litter_super() not needed
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE225d REVIEWED: 1 (1M) [PATCH v4 12/54] convert smackfs
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE300d [PATCH v3 50/50] d_make_discardable(): warn if given a non-persistent dentry
  2025-11-11 · Al Viro <viro@zeniv.linux.org.uk>
• STALE300d REVIEWED: 5 (5M) [PATCH v3 48/50] convert securityfs
  2025-11-11 · Al Viro <viro@zeniv.linux.org.uk>
• STALE300d REVIEWED: 5 (5M) [PATCH v3 49/50] kill securityfs_recursive_remove()
  2025-11-11 · Al Viro <viro@zeniv.linux.org.uk>
• STALE300d REVIEWED: 1 (1M) [PATCH v3 12/50] convert smackfs
  2025-11-11 · Al Viro <viro@zeniv.linux.org.uk>
• STALE300d REVIEWED: 1 (1M) [PATCH v3 10/50] configfs, securityfs: kill_litter_super() not needed
  2025-11-11 · Al Viro <viro@zeniv.linux.org.uk>
• STALE293d [PATCH v2 50/50] d_make_discardable(): warn if given a non-persistent dentry
  2025-10-28 · Al Viro <viro@zeniv.linux.org.uk>
• STALE293d [PATCH v2 49/50] kill securityfs_recursive_remove()
  2025-10-28 · Al Viro <viro@zeniv.linux.org.uk>
• STALE293d [PATCH v2 48/50] convert securityfs
  2025-10-28 · Al Viro <viro@zeniv.linux.org.uk>
• STALE293d REVIEWED: 1 (1M) [PATCH v2 12/50] convert smackfs
  2025-10-28 · Al Viro <viro@zeniv.linux.org.uk>
• STALE293d REVIEWED: 1 (1M) [PATCH v2 10/50] configfs, securityfs: kill_litter_super() not needed
  2025-10-28 · Al Viro <viro@zeniv.linux.org.uk>
• STALE354d [PATCH 08/39] configfs, securityfs: kill_litter_super() not needed
  2025-09-20 · Al Viro <viro@zeniv.linux.org.uk>
• STALE354d [PATCH 10/39] convert smackfs
  2025-09-20 · Al Viro <viro@zeniv.linux.org.uk>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE151d [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check
  2026-03-10 · Philipp Hahn <hidden>