landlock security module · Supported

Maintainers

• M Mickaël Salaün <mic@digikod.net>
• R Günther Noack <gnoack@google.com>

Paths

• F Documentation/admin-guide/LSM/landlock.rst
• F Documentation/security/landlock.rst
• F Documentation/userspace-api/landlock.rst
• F fs/ioctl.c
• F include/uapi/linux/landlock.h
• F samples/landlock/
• F security/landlock/
• F tools/testing/selftests/landlock/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on netdev (capped at 30), ordered by date desc.

• COOLING12d Re: [RFC PATCH v4 01/19] landlock: Support socket access-control
  2026-05-08 · Mickaël Salaün <mic@digikod.net>
• COOLING9d [PATCH v4 1/7] landlock: Add UDP bind() access control
  2026-05-02 · Matthieu Buffet <hidden>
• COOLING9d [PATCH v4 7/7] landlock: Add documentation for UDP support
  2026-05-02 · Matthieu Buffet <hidden>
• COOLING9d [PATCH v4 6/7] samples/landlock: Add sandboxer UDP access control
  2026-05-02 · Matthieu Buffet <hidden>
• COOLING9d [PATCH v4 5/7] selftests/landlock: Add tests for sendmsg()
  2026-05-02 · Matthieu Buffet <hidden>
• COOLING9d [PATCH v4 4/7] selftests/landlock: Add UDP bind/connect tests
  2026-05-02 · Matthieu Buffet <hidden>
• COOLING9d [PATCH v4 3/7] landlock: Add UDP send access control
  2026-05-02 · Matthieu Buffet <hidden>
• COOLING9d [PATCH v4 2/7] landlock: Add UDP connect() access control
  2026-05-02 · Matthieu Buffet <hidden>
• STALE114d [PATCH net-next v2 2/4] selftests/landlock: Move some UAPI header inclusions after libc ones
  2026-01-20 · Thomas Weißschuh <hidden>
• STALE110d LANDED [RFC PATCH v3 1/8] landlock: Minor reword of docs for TCP access rights
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d LANDED [RFC PATCH v3 2/8] landlock: Refactor TCP socket type check
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d [RFC PATCH v3 3/8] landlock: Add UDP bind+connect access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d [RFC PATCH v3 8/8] landlock: Add documentation for UDP support
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d [RFC PATCH v3 7/8] samples/landlock: Add sandboxer UDP access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d [RFC PATCH v3 6/8] selftests/landlock: Add tests for UDP sendmsg
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d [RFC PATCH v3 5/8] landlock: Add UDP sendmsg access control
  2025-12-12 · Matthieu Buffet <hidden>
• STALE110d [RFC PATCH v3 4/8] selftests/landlock: Add UDP bind/connect tests
  2025-12-12 · Matthieu Buffet <hidden>
• COOLING12d [RFC PATCH v4 17/19] selftests/landlock: Test socket creation denial log for audit
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 19/19] landlock: Document socket rule type support
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 13/19] selftests/landlock: Test SCTP peeloff restriction
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 16/19] landlock: Log socket creation denials
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 06/19] landlock: Add hook on socket creation
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d REVIEWED: 1 (1M) [RFC PATCH v4 10/19] selftests/landlock: Test that kernel space sockets are not restricted
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 08/19] selftests/landlock: Test network stack error code consistency
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 11/19] selftests/landlock: Test protocol mappings
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 18/19] samples/landlock: Support socket protocol restrictions
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 14/19] selftests/landlock: Test that accept(2) is not restricted
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 03/19] selftests/landlock: Test adding a socket rule
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 01/19] landlock: Support socket access-control
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 05/19] selftests/landlock: Test acceptable ranges of socket rule key
  2025-11-18 · Mikhail Ivanov <hidden>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COOLING12d [RFC PATCH v4 14/19] selftests/landlock: Test that accept(2) is not restricted
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 03/19] selftests/landlock: Test adding a socket rule
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 05/19] selftests/landlock: Test acceptable ranges of socket rule key
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 09/19] selftests/landlock: Test overlapped rulesets with rules of protocol ranges
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 04/19] selftests/landlock: Testing adding rule with wildcard value
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 07/19] selftests/landlock: Test basic socket restriction
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 16/19] landlock: Log socket creation denials
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 08/19] selftests/landlock: Test network stack error code consistency
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 11/19] selftests/landlock: Test protocol mappings
  2025-11-18 · Mikhail Ivanov <hidden>
• COOLING12d [RFC PATCH v4 18/19] samples/landlock: Support socket protocol restrictions
  2025-11-18 · Mikhail Ivanov <hidden>