apparmor security module

Most active threads (last 7 days)

No active threads in the last 7 days.

Recent patches

Latest 30 postings or standalone patches (up to 30), newest first. Counts below cover matching patches in netdev touching this subsystem.

• UUID and GUID user and group ids (*_r system calls) v2 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH v2 27/41] audit: log UUID and GUID ids in full 2026-10-21
  2026-10-21 · Jan Koester <hidden>
• Convert moduleparams to seq_buf v1 · 3 matching patches

  Entire posting: PENDING · 1 of 11 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS 2026-05-21
  • [PATCH 08/11] params: Convert generic kernel_param_ops .get helpers to seq_buf 2026-05-21
  • [PATCH 09/11] treewide: Convert custom kernel_param_ops .get callbacks to seq_buf via cocci 2026-05-21
  2026-05-21 · Kees Cook <kees@kernel.org>
• rxrpc: Miscellaneous fixes v3 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v3 04/11] list: Move on_list_rcu() to list.h and add on_list() also 2026-03-26
  2026-03-26 · David Howells <dhowells@redhat.com>
• rxrpc: Miscellaneous fixes v2 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net v2 04/10] list: Move on_list_rcu() to list.h and add on_list() also 2026-03-23
  2026-03-23 · David Howells <dhowells@redhat.com>
• treewide: Use IS_ERR_OR_NULL over manual NULL check - refactor v1 · 1 matching patch

  Entire posting: PENDING · 4 of 61 landed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 20/61] apparmor: Prefer IS_ERR_OR_NULL over manual NULL check 2026-03-10
  2026-03-10 · Philipp Hahn <hidden>
• vfs: change inode->i_ino from unsigned long to u64 v3 · 1 matching patch

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 12/12] treewide: change inode->i_ino from unsigned long to u64 2026-03-04
  2026-03-04 · Jeff Layton <jlayton@kernel.org>
• vfs: change inode->i_ino from unsigned long to u64 v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 049/110] security: use PRIino format for i_ino 2026-03-02
  • [PATCH v2 105/110] security: replace PRIino with %llu/%llx format strings 2026-03-02
  2026-03-02 · Jeff Layton <jlayton@kernel.org>
• vfs: change inode->i_ino from unsigned long to u64 v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 51/61] security: update audit format strings for u64 i_ino 2026-02-26
  2026-02-26 · Jeff Layton <jlayton@kernel.org>
• nios2: Add architecture support for clone3 v2 · 1 matching patch

  Entire posting: LANDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 2/4] copy_process: pass clone_flags as u64 across calltree 2025-09-01
  2025-09-01 · Simon Schuster via B4 Relay <devnull+schuster.simon.siemens-energy.com@kernel.org>
• LSM: Replace secctx/len pairs with lsm_context v3 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 1/5] LSM: Ensure the correct LSM context releaser 2024-10-23
  • [PATCH v3 2/5] LSM: Replace context+len with lsm_context 2024-10-23
  2024-10-23 · Casey Schaufler <casey@schaufler-ca.com>
• LSM: Replace secctx/len pairs with lsm_context v2 · 2 matching patches

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v2 1/6] LSM: Ensure the correct LSM context releaser 2024-10-14
  • [PATCH v2 2/6] LSM: Replace context+len with lsm_context 2024-10-14
  2024-10-14 · Casey Schaufler <casey@schaufler-ca.com>
• LSM: Replace secctx/len pairs with lsm_context v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 1/5] LSM: Replace context+len with lsm_context 2024-09-17
  2024-09-17 · Casey Schaufler <casey@schaufler-ca.com>
• LSM: Move away from secids v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 07/13] LSM: Use lsmblob in security_current_getsecid 2024-08-25
  2024-08-25 · Casey Schaufler <casey@schaufler-ca.com>
• Add return value range check for BPF LSM v4 · 4 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH bpf-next v4 06/20] lsm: Refactor return value of LSM hook getselfattr 2024-07-11
  • [PATCH bpf-next v4 07/20] lsm: Refactor return value of LSM hook setprocattr 2024-07-11
  • [PATCH bpf-next v4 08/20] lsm: Refactor return value of LSM hook getprocattr 2024-07-11
  • [PATCH bpf-next v4 10/20] lsm: Refactor return value of LSM hook audit_rule_match 2024-07-11
  2024-07-11 · Xu Kuohai <xukuohai@huaweicloud.com>
• [PATCH v1 1/1] treewide: Align match_string() with sysfs_match_string() 2024-06-03 · Andy Shevchenko <andriy.shevchenko@linux.intel.com>
• [RFC PATCH] LSM, net: Add SO_PEERCONTEXT for peer LSM data 2024-05-13 · Casey Schaufler <casey@schaufler-ca.com>
• sysctl: treewide: constify ctl_table argument of sysctl handlers v3 · 1 matching patch

  Entire posting: PENDING · 1 of 11 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v3 11/11] sysctl: treewide: constify the ctl_table argument of handlers 2024-04-23
  2024-04-23 · Thomas Weißschuh <linux@weissschuh.net>
• sysctl: treewide: constify ctl_table argument of sysctl handlers v1 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers 2024-03-15
  2024-03-15 · Thomas Weißschuh <linux@weissschuh.net>
• LSM: General module stacking v39 · 4 matching patches

  Entire posting: PENDING · 14 of 42 reviewed Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v39 10/42] LSM: Use lsmblob in security_current_getsecid 2023-12-15
  • [PATCH v39 16/42] LSM: Ensure the correct LSM context releaser 2023-12-15
  • [PATCH v39 17/42] LSM: Use lsmcontext in security_secid_to_secctx 2023-12-15
  • [PATCH v39 18/42] LSM: Use lsmcontext in security_lsmblob_to_secctx 2023-12-15
  2023-12-15 · Casey Schaufler <casey@schaufler-ca.com>
• Remove the end element in sysctl table arrays. v1 · 2 matching patches

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH 07/11] sysctl: Add size to register_sysctl 2023-06-21
  • [PATCH 09/11] sysctl: Remove the end element in sysctl table arrays 2023-06-21
  2023-06-21 · Joel Granados <hidden>
• net: Drop size arg from ->sendmsg() and pass msghdr into __ip{,6}_append_data() rfc · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [RFC PATCH 1/3] net: Drop the size argument from ->sendmsg() 2023-03-22
  2023-03-22 · David Howells <dhowells@redhat.com>
• [PATCH] lsm: make security_socket_getpeersec_stream() sockptr_t safe 2022-10-10 · Paul Moore <paul@paul-moore.com>
• REVIEWED · 2 reviews, 1 by a maintainer [PATCH v3] cred: Propagate security_prepare_creds() error code 2022-06-08 · Frederick Lawler <hidden>
• [PATCH v2] cred: Propagate security_prepare_creds() error code 2022-05-25 · Frederick Lawler <hidden>
• [PATCH] cred: Propagate security_prepare_creds() error code 2022-05-20 · Frederick Lawler <hidden>
• [PATCH RFC 9/9] sk_buff: access secmark via getter/setter 2021-07-21 · Paolo Abeni <pabeni@redhat.com>
• mptcp: reject invalid mp_join requests right away v1 · 1 matching patch

  Entire posting: Pending Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH net-next 1/3] security: add const qualifier to struct sock in various places 2020-11-30
  2020-11-30 · Florian Westphal <fw@strlen.de>
• mm, treewide: Rename kzfree() to kfree_sensitive() v5 · 1 matching patch

  Entire posting: REVIEWED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v5 2/2] mm, treewide: Rename kzfree() to kfree_sensitive() 2020-06-16
  2020-06-16 · Waiman Long <longman@redhat.com>
• mm, treewide: Rename kzfree() to kfree_sensitive() v4 · 1 matching patch

  Entire posting: SUPERSEDED Open cover letterLifecycle progress covers the full posting, including patches outside this subsystem and inbox.

  • [PATCH v4 2/3] mm, treewide: Rename kzfree() to kfree_sensitive() 2020-06-16
  2020-06-16 · Waiman Long <longman@redhat.com>
• REVIEWED · 1 review, 0 by maintainers [PATCH 5/5] sysctl: pass kernel pointers to ->proc_handler 2020-04-24 · Christoph Hellwig <hch@lst.de>