security subsystem · Supported

Maintainers

• M Paul Moore <paul@paul-moore.com>
• M James Morris <jmorris@namei.org>
• M "Serge E. Hallyn" <serge@hallyn.com>

Paths

• F include/linux/lsm/
• F include/linux/lsm_audit.h
• F include/linux/lsm_hook_defs.h
• F include/linux/lsm_hooks.h
• F include/linux/security.h
• F include/uapi/linux/lsm.h
• F security/
• F tools/testing/selftests/lsm/
• F rust/kernel/security.rs
• X security/selinux/

Last 30 days

Most active threads (last 7 days)

• HOTtoday [PATCH 0/2] Bring includes in linux/kmod.h up to date
  2026-07-08 15:46 · 1 reply in 7d · Petr Pavlu <petr.pavlu@suse.com>

Recent patches

Most-recent 30 patches in this subsystem on linuxppc-dev (capped at 30), ordered by date desc.

• HOTtoday [PATCH 1/2] umh, treewide: Explicitly include linux/umh.h where needed
  2026-07-08 · Petr Pavlu <petr.pavlu@suse.com>
• COLD29d [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD29d [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD29d [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
  2026-05-21 · Kees Cook <kees@kernel.org>
• COLD44d [PATCH v5 12/14] module: Introduce hash-based integrity checking
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• COLD44d REVIEWED: 7 (7M) [PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• COLD44d [PATCH v5 09/14] module: Move signature type check out of mod_check_sig()
  2026-05-05 · Thomas Weißschuh <linux@weissschuh.net>
• STALE118d [PATCH] integrity: Eliminate weak definition of arch_get_secureboot()
  2026-03-09 · Nathan Chancellor <nathan@kernel.org>
• STALE122d Re: [PATCH] integrity: avoid using __weak functions
  2026-03-06 · Nathan Chancellor <nathan@kernel.org>
• STALE122d [PATCH] integrity: avoid using __weak functions
  2026-03-06 · Arnd Bergmann <arnd@kernel.org>
• STALE132d REVIEWED: 8 (8M) [PATCH 1/2] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-02-26 · Thomas Weißschuh <linux@weissschuh.net>
• STALE125d [PATCH v3 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-02-13 · Coiby Xu <hidden>
• STALE147d [PATCH v2 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-02-03 · Coiby Xu <hidden>
• STALE132d REVIEWED: 16 (16M) [PATCH v6 5/6] keys/trusted_keys: establish PKWM as a trusted source
  2026-02-01 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE161d REVIEWED: 13 (13M) [PATCH v5 5/6] keys/trusted_keys: establish PKWM as a trusted source
  2026-01-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE143d REVIEWED: 1 (1M) [PATCH 2/2] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-01-23 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE143d REVIEWED: 1 (1M) [PATCH 1/2] keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal
  2026-01-23 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE133d Re: [PATCH 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-01-19 · Coiby Xu <hidden>
• STALE166d REVIEWED: 5 (5M) [PATCH v4 5/6] keys/trusted_keys: establish PKWM as a trusted source
  2026-01-15 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE133d [PATCH 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-01-15 · Coiby Xu <hidden>
• STALE120d [PATCH v4 15/17] module: Introduce hash-based integrity checking
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE120d [PATCH v4 14/17] lockdown: Make the relationship to MODULE_SIG a dependency
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE120d [PATCH v4 13/17] module: Report signature type to users
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE120d [PATCH v4 08/17] module: Deduplicate signature extraction
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE120d [PATCH v4 03/17] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-01-13 · Thomas Weißschuh <linux@weissschuh.net>
• STALE176d REVIEWED: 5 (5M) [PATCH v3 5/6] keys/trusted_keys: establish PKWM as a trusted source
  2026-01-06 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE185d [PATCH v2 5/6] keys/trusted_keys: establish PKWM as a trusted source
  2025-12-17 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE205d [PATCH 5/6] keys/trusted_keys: establish PKWM as a trusted source
  2025-12-13 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE159d REVIEWED: 5 (5M) [PATCH v4 52/54] convert securityfs
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>
• STALE159d REVIEWED: 5 (5M) [PATCH v4 53/54] kill securityfs_recursive_remove()
  2025-11-18 · Al Viro <viro@zeniv.linux.org.uk>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE132d REVIEWED: 8 (8M) [PATCH 1/2] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-02-26 · Thomas Weißschuh <linux@weissschuh.net> · 3 Reviewed-by